./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 331c48a04a8caddf27498f6f02cdac644ba512a5bbe373bec7a9be0d5f3b8263 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-19 07:13:04,351 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-19 07:13:04,353 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-19 07:13:04,383 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-19 07:13:04,383 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-19 07:13:04,387 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-19 07:13:04,390 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-19 07:13:04,393 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-19 07:13:04,398 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-19 07:13:04,403 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-19 07:13:04,405 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-19 07:13:04,407 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-19 07:13:04,407 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-19 07:13:04,410 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-19 07:13:04,412 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-19 07:13:04,413 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-19 07:13:04,414 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-19 07:13:04,415 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-19 07:13:04,417 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-19 07:13:04,424 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-19 07:13:04,425 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-19 07:13:04,426 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-19 07:13:04,429 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-19 07:13:04,430 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-19 07:13:04,438 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-19 07:13:04,438 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-19 07:13:04,438 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-19 07:13:04,440 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-19 07:13:04,441 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-19 07:13:04,443 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-19 07:13:04,444 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-19 07:13:04,445 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-19 07:13:04,447 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-19 07:13:04,448 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-19 07:13:04,449 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-19 07:13:04,449 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-19 07:13:04,449 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-19 07:13:04,450 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-19 07:13:04,450 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-19 07:13:04,451 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-19 07:13:04,451 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-19 07:13:04,452 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-19 07:13:04,498 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-19 07:13:04,498 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-19 07:13:04,499 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-19 07:13:04,499 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-19 07:13:04,500 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-19 07:13:04,501 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-19 07:13:04,501 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-19 07:13:04,501 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-19 07:13:04,501 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-19 07:13:04,501 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-19 07:13:04,502 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-19 07:13:04,503 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-19 07:13:04,503 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-19 07:13:04,503 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-19 07:13:04,503 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-19 07:13:04,504 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-19 07:13:04,504 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-19 07:13:04,504 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-19 07:13:04,505 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-19 07:13:04,505 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-19 07:13:04,505 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-19 07:13:04,505 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-19 07:13:04,506 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-19 07:13:04,507 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-19 07:13:04,507 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-19 07:13:04,508 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-19 07:13:04,508 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-19 07:13:04,508 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-19 07:13:04,508 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-19 07:13:04,509 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-19 07:13:04,509 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-19 07:13:04,509 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-19 07:13:04,509 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 07:13:04,510 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-19 07:13:04,510 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-19 07:13:04,510 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-19 07:13:04,510 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-19 07:13:04,510 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-19 07:13:04,511 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-19 07:13:04,511 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-19 07:13:04,511 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-19 07:13:04,511 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 331c48a04a8caddf27498f6f02cdac644ba512a5bbe373bec7a9be0d5f3b8263 [2022-11-19 07:13:04,833 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-19 07:13:04,901 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-19 07:13:04,904 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-19 07:13:04,905 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-19 07:13:04,907 INFO L275 PluginConnector]: CDTParser initialized [2022-11-19 07:13:04,913 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/../../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c [2022-11-19 07:13:04,980 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/data/c4679b971/c99c6809ec96431cbadc237ab81e2b28/FLAG74471dfc8 [2022-11-19 07:13:05,622 INFO L306 CDTParser]: Found 1 translation units. [2022-11-19 07:13:05,623 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/sv-benchmarks/c/product-lines/email_spec0_product36.cil.c [2022-11-19 07:13:05,648 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/data/c4679b971/c99c6809ec96431cbadc237ab81e2b28/FLAG74471dfc8 [2022-11-19 07:13:05,854 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/data/c4679b971/c99c6809ec96431cbadc237ab81e2b28 [2022-11-19 07:13:05,857 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-19 07:13:05,858 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-19 07:13:05,866 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-19 07:13:05,866 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-19 07:13:05,870 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-19 07:13:05,870 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:13:05" (1/1) ... [2022-11-19 07:13:05,872 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1157a373 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:13:05, skipping insertion in model container [2022-11-19 07:13:05,873 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:13:05" (1/1) ... [2022-11-19 07:13:05,880 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-19 07:13:05,950 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-19 07:13:06,212 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/sv-benchmarks/c/product-lines/email_spec0_product36.cil.c[12529,12542] [2022-11-19 07:13:06,534 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 07:13:06,550 INFO L203 MainTranslator]: Completed pre-run [2022-11-19 07:13:06,615 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/sv-benchmarks/c/product-lines/email_spec0_product36.cil.c[12529,12542] [2022-11-19 07:13:06,677 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 07:13:06,704 INFO L208 MainTranslator]: Completed translation [2022-11-19 07:13:06,705 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:13:06 WrapperNode [2022-11-19 07:13:06,705 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-19 07:13:06,706 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-19 07:13:06,706 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-19 07:13:06,706 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-19 07:13:06,714 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:13:06" (1/1) ... [2022-11-19 07:13:06,735 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:13:06" (1/1) ... [2022-11-19 07:13:06,780 INFO L138 Inliner]: procedures = 113, calls = 154, calls flagged for inlining = 41, calls inlined = 36, statements flattened = 695 [2022-11-19 07:13:06,781 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-19 07:13:06,781 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-19 07:13:06,781 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-19 07:13:06,782 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-19 07:13:06,791 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:13:06" (1/1) ... [2022-11-19 07:13:06,791 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:13:06" (1/1) ... [2022-11-19 07:13:06,795 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:13:06" (1/1) ... [2022-11-19 07:13:06,795 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:13:06" (1/1) ... [2022-11-19 07:13:06,808 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:13:06" (1/1) ... [2022-11-19 07:13:06,815 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:13:06" (1/1) ... [2022-11-19 07:13:06,818 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:13:06" (1/1) ... [2022-11-19 07:13:06,821 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:13:06" (1/1) ... [2022-11-19 07:13:06,826 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-19 07:13:06,827 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-19 07:13:06,827 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-19 07:13:06,828 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-19 07:13:06,828 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:13:06" (1/1) ... [2022-11-19 07:13:06,852 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 07:13:06,862 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:13:06,874 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-19 07:13:06,902 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-19 07:13:06,920 INFO L130 BoogieDeclarations]: Found specification of procedure getClientAddressBookSize [2022-11-19 07:13:06,920 INFO L138 BoogieDeclarations]: Found implementation of procedure getClientAddressBookSize [2022-11-19 07:13:06,920 INFO L130 BoogieDeclarations]: Found specification of procedure setClientAddressBookAddress [2022-11-19 07:13:06,920 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientAddressBookAddress [2022-11-19 07:13:06,921 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailTo [2022-11-19 07:13:06,921 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailTo [2022-11-19 07:13:06,921 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing__wrappee__AutoResponder [2022-11-19 07:13:06,921 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing__wrappee__AutoResponder [2022-11-19 07:13:06,921 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailFrom [2022-11-19 07:13:06,921 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailFrom [2022-11-19 07:13:06,922 INFO L130 BoogieDeclarations]: Found specification of procedure isReadable [2022-11-19 07:13:06,922 INFO L138 BoogieDeclarations]: Found implementation of procedure isReadable [2022-11-19 07:13:06,922 INFO L130 BoogieDeclarations]: Found specification of procedure puts [2022-11-19 07:13:06,922 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailFrom [2022-11-19 07:13:06,922 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailFrom [2022-11-19 07:13:06,922 INFO L130 BoogieDeclarations]: Found specification of procedure queue [2022-11-19 07:13:06,923 INFO L138 BoogieDeclarations]: Found implementation of procedure queue [2022-11-19 07:13:06,923 INFO L130 BoogieDeclarations]: Found specification of procedure setClientId [2022-11-19 07:13:06,923 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientId [2022-11-19 07:13:06,923 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-19 07:13:06,923 INFO L130 BoogieDeclarations]: Found specification of procedure setClientAddressBookSize [2022-11-19 07:13:06,923 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientAddressBookSize [2022-11-19 07:13:06,924 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing [2022-11-19 07:13:06,924 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing [2022-11-19 07:13:06,924 INFO L130 BoogieDeclarations]: Found specification of procedure sendEmail [2022-11-19 07:13:06,924 INFO L138 BoogieDeclarations]: Found implementation of procedure sendEmail [2022-11-19 07:13:06,925 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailTo [2022-11-19 07:13:06,925 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailTo [2022-11-19 07:13:06,925 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-19 07:13:06,925 INFO L130 BoogieDeclarations]: Found specification of procedure getClientAddressBookAddress [2022-11-19 07:13:06,925 INFO L138 BoogieDeclarations]: Found implementation of procedure getClientAddressBookAddress [2022-11-19 07:13:06,925 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-19 07:13:06,926 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-19 07:13:07,159 INFO L235 CfgBuilder]: Building ICFG [2022-11-19 07:13:07,176 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-19 07:13:08,000 INFO L276 CfgBuilder]: Performing block encoding [2022-11-19 07:13:08,386 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-19 07:13:08,386 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-11-19 07:13:08,389 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:13:08 BoogieIcfgContainer [2022-11-19 07:13:08,389 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-19 07:13:08,392 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-19 07:13:08,392 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-19 07:13:08,396 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-19 07:13:08,396 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 07:13:05" (1/3) ... [2022-11-19 07:13:08,397 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@19cb0176 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:13:08, skipping insertion in model container [2022-11-19 07:13:08,398 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:13:06" (2/3) ... [2022-11-19 07:13:08,399 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@19cb0176 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:13:08, skipping insertion in model container [2022-11-19 07:13:08,399 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:13:08" (3/3) ... [2022-11-19 07:13:08,401 INFO L112 eAbstractionObserver]: Analyzing ICFG email_spec0_product36.cil.c [2022-11-19 07:13:08,420 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-19 07:13:08,421 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-19 07:13:08,498 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-19 07:13:08,510 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@601bc6fa, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-19 07:13:08,511 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-19 07:13:08,515 INFO L276 IsEmpty]: Start isEmpty. Operand has 122 states, 75 states have (on average 1.4133333333333333) internal successors, (106), 78 states have internal predecessors, (106), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (31), 30 states have call predecessors, (31), 31 states have call successors, (31) [2022-11-19 07:13:08,539 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-19 07:13:08,540 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:13:08,540 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:13:08,541 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:13:08,547 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:13:08,547 INFO L85 PathProgramCache]: Analyzing trace with hash -928715630, now seen corresponding path program 1 times [2022-11-19 07:13:08,558 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:13:08,559 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1302845449] [2022-11-19 07:13:08,559 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:13:08,560 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:13:08,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:13:08,977 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-19 07:13:08,978 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:13:08,978 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1302845449] [2022-11-19 07:13:08,979 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1302845449] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:13:08,979 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:13:08,980 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-19 07:13:08,981 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [965521771] [2022-11-19 07:13:08,982 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:13:08,987 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-19 07:13:08,987 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:13:09,016 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-19 07:13:09,017 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-19 07:13:09,019 INFO L87 Difference]: Start difference. First operand has 122 states, 75 states have (on average 1.4133333333333333) internal successors, (106), 78 states have internal predecessors, (106), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (31), 30 states have call predecessors, (31), 31 states have call successors, (31) Second operand has 2 states, 2 states have (on average 14.0) internal successors, (28), 2 states have internal predecessors, (28), 2 states have call successors, (13), 2 states have call predecessors, (13), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-19 07:13:09,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:13:09,157 INFO L93 Difference]: Finished difference Result 201 states and 271 transitions. [2022-11-19 07:13:09,161 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-19 07:13:09,163 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 14.0) internal successors, (28), 2 states have internal predecessors, (28), 2 states have call successors, (13), 2 states have call predecessors, (13), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 55 [2022-11-19 07:13:09,163 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:13:09,180 INFO L225 Difference]: With dead ends: 201 [2022-11-19 07:13:09,181 INFO L226 Difference]: Without dead ends: 119 [2022-11-19 07:13:09,187 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-19 07:13:09,193 INFO L413 NwaCegarLoop]: 137 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 137 SdHoareTripleChecker+Invalid, 29 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:13:09,194 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 137 Invalid, 29 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:13:09,213 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 119 states. [2022-11-19 07:13:09,256 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 119 to 119. [2022-11-19 07:13:09,262 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 119 states, 73 states have (on average 1.36986301369863) internal successors, (100), 75 states have internal predecessors, (100), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (30), 29 states have call predecessors, (30), 30 states have call successors, (30) [2022-11-19 07:13:09,268 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 119 states to 119 states and 161 transitions. [2022-11-19 07:13:09,270 INFO L78 Accepts]: Start accepts. Automaton has 119 states and 161 transitions. Word has length 55 [2022-11-19 07:13:09,273 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:13:09,273 INFO L495 AbstractCegarLoop]: Abstraction has 119 states and 161 transitions. [2022-11-19 07:13:09,274 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 14.0) internal successors, (28), 2 states have internal predecessors, (28), 2 states have call successors, (13), 2 states have call predecessors, (13), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-19 07:13:09,275 INFO L276 IsEmpty]: Start isEmpty. Operand 119 states and 161 transitions. [2022-11-19 07:13:09,280 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-19 07:13:09,281 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:13:09,281 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:13:09,282 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-19 07:13:09,282 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:13:09,283 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:13:09,283 INFO L85 PathProgramCache]: Analyzing trace with hash -1945730734, now seen corresponding path program 1 times [2022-11-19 07:13:09,283 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:13:09,284 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1764534356] [2022-11-19 07:13:09,285 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:13:09,288 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:13:09,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:13:09,663 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-19 07:13:09,663 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:13:09,664 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1764534356] [2022-11-19 07:13:09,664 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1764534356] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:13:09,664 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:13:09,664 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 07:13:09,664 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1008682738] [2022-11-19 07:13:09,665 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:13:09,666 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 07:13:09,666 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:13:09,667 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 07:13:09,667 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:13:09,667 INFO L87 Difference]: Start difference. First operand 119 states and 161 transitions. Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (13), 2 states have call predecessors, (13), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-19 07:13:09,760 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:13:09,760 INFO L93 Difference]: Finished difference Result 197 states and 256 transitions. [2022-11-19 07:13:09,761 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 07:13:09,761 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (13), 2 states have call predecessors, (13), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 56 [2022-11-19 07:13:09,761 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:13:09,763 INFO L225 Difference]: With dead ends: 197 [2022-11-19 07:13:09,763 INFO L226 Difference]: Without dead ends: 121 [2022-11-19 07:13:09,764 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:13:09,765 INFO L413 NwaCegarLoop]: 134 mSDtfsCounter, 0 mSDsluCounter, 133 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 267 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:13:09,766 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 267 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:13:09,767 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 121 states. [2022-11-19 07:13:09,777 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 121 to 121. [2022-11-19 07:13:09,777 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 121 states, 75 states have (on average 1.36) internal successors, (102), 77 states have internal predecessors, (102), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (30), 29 states have call predecessors, (30), 30 states have call successors, (30) [2022-11-19 07:13:09,779 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 121 states to 121 states and 163 transitions. [2022-11-19 07:13:09,779 INFO L78 Accepts]: Start accepts. Automaton has 121 states and 163 transitions. Word has length 56 [2022-11-19 07:13:09,779 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:13:09,779 INFO L495 AbstractCegarLoop]: Abstraction has 121 states and 163 transitions. [2022-11-19 07:13:09,780 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (13), 2 states have call predecessors, (13), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-19 07:13:09,780 INFO L276 IsEmpty]: Start isEmpty. Operand 121 states and 163 transitions. [2022-11-19 07:13:09,782 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-19 07:13:09,782 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:13:09,782 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:13:09,782 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-19 07:13:09,783 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:13:09,783 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:13:09,783 INFO L85 PathProgramCache]: Analyzing trace with hash 1853590400, now seen corresponding path program 1 times [2022-11-19 07:13:09,783 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:13:09,784 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [3855591] [2022-11-19 07:13:09,784 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:13:09,784 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:13:09,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:13:10,008 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-19 07:13:10,009 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:13:10,009 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [3855591] [2022-11-19 07:13:10,009 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [3855591] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:13:10,009 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [624524548] [2022-11-19 07:13:10,009 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:13:10,010 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:13:10,010 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:13:10,017 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:13:10,038 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-19 07:13:10,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:13:10,340 INFO L263 TraceCheckSpWp]: Trace formula consists of 858 conjuncts, 3 conjunts are in the unsatisfiable core [2022-11-19 07:13:10,350 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:13:10,425 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-19 07:13:10,430 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:13:10,521 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-19 07:13:10,521 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [624524548] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:13:10,525 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1157989639] [2022-11-19 07:13:10,551 INFO L159 IcfgInterpreter]: Started Sifa with 51 locations of interest [2022-11-19 07:13:10,552 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:13:10,557 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:13:10,562 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:13:10,564 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:13:19,631 INFO L197 IcfgInterpreter]: Interpreting procedure setClientId with input of size 451 for LOIs [2022-11-19 07:13:19,983 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:13:49,561 WARN L233 SmtUtils]: Spent 10.79s on a formula simplification. DAG size of input: 564 DAG size of output: 394 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-19 07:13:57,071 WARN L233 SmtUtils]: Spent 7.06s on a formula simplification. DAG size of input: 566 DAG size of output: 318 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-19 07:13:58,379 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1157989639] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:13:58,380 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:13:58,380 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [4, 4, 4] total 19 [2022-11-19 07:13:58,381 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1483004903] [2022-11-19 07:13:58,381 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:13:58,382 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-19 07:13:58,382 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:13:58,382 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-19 07:13:58,383 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=58, Invalid=284, Unknown=0, NotChecked=0, Total=342 [2022-11-19 07:13:58,383 INFO L87 Difference]: Start difference. First operand 121 states and 163 transitions. Second operand has 14 states, 10 states have (on average 3.2) internal successors, (32), 9 states have internal predecessors, (32), 4 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) [2022-11-19 07:14:01,739 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:14:01,739 INFO L93 Difference]: Finished difference Result 307 states and 461 transitions. [2022-11-19 07:14:01,740 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-19 07:14:01,741 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 10 states have (on average 3.2) internal successors, (32), 9 states have internal predecessors, (32), 4 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) Word has length 60 [2022-11-19 07:14:01,741 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:14:01,742 INFO L225 Difference]: With dead ends: 307 [2022-11-19 07:14:01,743 INFO L226 Difference]: Without dead ends: 198 [2022-11-19 07:14:01,744 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 182 GetRequests, 163 SyntacticMatches, 2 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 98 ImplicationChecksByTransitivity, 38.4s TimeCoverageRelationStatistics Valid=58, Invalid=284, Unknown=0, NotChecked=0, Total=342 [2022-11-19 07:14:01,745 INFO L413 NwaCegarLoop]: 180 mSDtfsCounter, 120 mSDsluCounter, 1491 mSDsCounter, 0 mSdLazyCounter, 791 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 1671 SdHoareTripleChecker+Invalid, 802 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 791 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:14:01,746 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [120 Valid, 1671 Invalid, 802 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [11 Valid, 791 Invalid, 0 Unknown, 0 Unchecked, 3.1s Time] [2022-11-19 07:14:01,746 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 198 states. [2022-11-19 07:14:01,803 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 198 to 142. [2022-11-19 07:14:01,804 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 142 states, 96 states have (on average 1.3958333333333333) internal successors, (134), 98 states have internal predecessors, (134), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (30), 29 states have call predecessors, (30), 30 states have call successors, (30) [2022-11-19 07:14:01,805 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 142 states to 142 states and 195 transitions. [2022-11-19 07:14:01,806 INFO L78 Accepts]: Start accepts. Automaton has 142 states and 195 transitions. Word has length 60 [2022-11-19 07:14:01,806 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:14:01,806 INFO L495 AbstractCegarLoop]: Abstraction has 142 states and 195 transitions. [2022-11-19 07:14:01,806 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 10 states have (on average 3.2) internal successors, (32), 9 states have internal predecessors, (32), 4 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) [2022-11-19 07:14:01,807 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 195 transitions. [2022-11-19 07:14:01,809 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-11-19 07:14:01,809 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:14:01,810 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:14:01,819 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-19 07:14:02,016 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:14:02,017 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:14:02,017 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:14:02,017 INFO L85 PathProgramCache]: Analyzing trace with hash 1156196368, now seen corresponding path program 1 times [2022-11-19 07:14:02,018 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:14:02,018 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2047236618] [2022-11-19 07:14:02,018 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:14:02,018 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:14:02,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:14:02,091 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-19 07:14:02,091 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:14:02,092 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2047236618] [2022-11-19 07:14:02,092 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2047236618] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:14:02,092 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:14:02,092 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 07:14:02,092 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1578000609] [2022-11-19 07:14:02,093 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:14:02,093 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 07:14:02,093 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:14:02,093 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 07:14:02,094 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:14:02,094 INFO L87 Difference]: Start difference. First operand 142 states and 195 transitions. Second operand has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (13), 2 states have call predecessors, (13), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-19 07:14:02,269 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:14:02,269 INFO L93 Difference]: Finished difference Result 325 states and 463 transitions. [2022-11-19 07:14:02,270 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 07:14:02,270 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (13), 2 states have call predecessors, (13), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 61 [2022-11-19 07:14:02,270 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:14:02,272 INFO L225 Difference]: With dead ends: 325 [2022-11-19 07:14:02,272 INFO L226 Difference]: Without dead ends: 197 [2022-11-19 07:14:02,273 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:14:02,274 INFO L413 NwaCegarLoop]: 138 mSDtfsCounter, 48 mSDsluCounter, 131 mSDsCounter, 0 mSdLazyCounter, 58 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 269 SdHoareTripleChecker+Invalid, 59 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 58 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:14:02,275 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 269 Invalid, 59 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 58 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:14:02,276 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2022-11-19 07:14:02,373 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 192. [2022-11-19 07:14:02,374 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 192 states, 143 states have (on average 1.4755244755244756) internal successors, (211), 145 states have internal predecessors, (211), 34 states have call successors, (34), 14 states have call predecessors, (34), 14 states have return successors, (33), 32 states have call predecessors, (33), 33 states have call successors, (33) [2022-11-19 07:14:02,376 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 192 states to 192 states and 278 transitions. [2022-11-19 07:14:02,376 INFO L78 Accepts]: Start accepts. Automaton has 192 states and 278 transitions. Word has length 61 [2022-11-19 07:14:02,376 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:14:02,377 INFO L495 AbstractCegarLoop]: Abstraction has 192 states and 278 transitions. [2022-11-19 07:14:02,377 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (13), 2 states have call predecessors, (13), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-19 07:14:02,377 INFO L276 IsEmpty]: Start isEmpty. Operand 192 states and 278 transitions. [2022-11-19 07:14:02,379 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-11-19 07:14:02,379 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:14:02,379 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:14:02,379 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-19 07:14:02,380 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:14:02,380 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:14:02,380 INFO L85 PathProgramCache]: Analyzing trace with hash 1197564539, now seen corresponding path program 1 times [2022-11-19 07:14:02,380 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:14:02,381 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1522928789] [2022-11-19 07:14:02,381 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:14:02,381 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:14:02,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:14:02,515 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-19 07:14:02,515 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:14:02,516 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1522928789] [2022-11-19 07:14:02,516 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1522928789] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:14:02,516 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [898292013] [2022-11-19 07:14:02,516 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:14:02,516 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:14:02,517 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:14:02,518 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:14:02,546 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-19 07:14:02,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:14:02,799 INFO L263 TraceCheckSpWp]: Trace formula consists of 875 conjuncts, 3 conjunts are in the unsatisfiable core [2022-11-19 07:14:02,802 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:14:02,827 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-19 07:14:02,827 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:14:02,879 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-19 07:14:02,880 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [898292013] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:14:02,880 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [829940579] [2022-11-19 07:14:02,885 INFO L159 IcfgInterpreter]: Started Sifa with 53 locations of interest [2022-11-19 07:14:02,885 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:14:02,887 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:14:02,887 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:14:02,887 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:14:21,581 INFO L197 IcfgInterpreter]: Interpreting procedure setClientId with input of size 452 for LOIs [2022-11-19 07:14:21,924 INFO L197 IcfgInterpreter]: Interpreting procedure sendEmail with input of size 248 for LOIs [2022-11-19 07:14:23,567 INFO L197 IcfgInterpreter]: Interpreting procedure outgoing with input of size 250 for LOIs [2022-11-19 07:14:24,227 INFO L197 IcfgInterpreter]: Interpreting procedure outgoing__wrappee__AutoResponder with input of size 253 for LOIs [2022-11-19 07:14:26,655 INFO L197 IcfgInterpreter]: Interpreting procedure getEmailTo with input of size 241 for LOIs [2022-11-19 07:14:26,706 INFO L197 IcfgInterpreter]: Interpreting procedure setEmailFrom with input of size 476 for LOIs [2022-11-19 07:14:28,593 INFO L197 IcfgInterpreter]: Interpreting procedure setEmailTo with input of size 238 for LOIs [2022-11-19 07:14:28,634 INFO L197 IcfgInterpreter]: Interpreting procedure getClientAddressBookSize with input of size 230 for LOIs [2022-11-19 07:14:28,669 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:14:40,225 WARN L233 SmtUtils]: Spent 5.27s on a formula simplification. DAG size of input: 452 DAG size of output: 257 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-19 07:14:45,794 WARN L233 SmtUtils]: Spent 5.47s on a formula simplification. DAG size of input: 475 DAG size of output: 277 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-19 07:15:07,481 WARN L233 SmtUtils]: Spent 8.34s on a formula simplification. DAG size of input: 557 DAG size of output: 395 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-19 07:15:16,274 WARN L233 SmtUtils]: Spent 8.50s on a formula simplification. DAG size of input: 555 DAG size of output: 393 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-19 07:15:37,466 WARN L233 SmtUtils]: Spent 13.43s on a formula simplification. DAG size of input: 476 DAG size of output: 364 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-19 07:16:11,889 WARN L233 SmtUtils]: Spent 5.54s on a formula simplification. DAG size of input: 500 DAG size of output: 337 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-19 07:16:21,744 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [829940579] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:16:21,744 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:16:21,744 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [41] imperfect sequences [4, 4, 4] total 47 [2022-11-19 07:16:21,745 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [42951008] [2022-11-19 07:16:21,745 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:16:21,745 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 42 states [2022-11-19 07:16:21,745 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:16:21,746 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2022-11-19 07:16:21,747 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=133, Invalid=2029, Unknown=0, NotChecked=0, Total=2162 [2022-11-19 07:16:21,748 INFO L87 Difference]: Start difference. First operand 192 states and 278 transitions. Second operand has 42 states, 28 states have (on average 1.2142857142857142) internal successors, (34), 25 states have internal predecessors, (34), 12 states have call successors, (13), 9 states have call predecessors, (13), 6 states have return successors, (10), 9 states have call predecessors, (10), 9 states have call successors, (10) [2022-11-19 07:16:34,112 WARN L233 SmtUtils]: Spent 5.88s on a formula simplification. DAG size of input: 476 DAG size of output: 348 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-19 07:16:39,722 WARN L233 SmtUtils]: Spent 5.25s on a formula simplification. DAG size of input: 474 DAG size of output: 346 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-19 07:16:48,384 WARN L233 SmtUtils]: Spent 5.20s on a formula simplification. DAG size of input: 479 DAG size of output: 345 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-19 07:17:02,082 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:17:02,083 INFO L93 Difference]: Finished difference Result 485 states and 755 transitions. [2022-11-19 07:17:02,084 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 44 states. [2022-11-19 07:17:02,084 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 28 states have (on average 1.2142857142857142) internal successors, (34), 25 states have internal predecessors, (34), 12 states have call successors, (13), 9 states have call predecessors, (13), 6 states have return successors, (10), 9 states have call predecessors, (10), 9 states have call successors, (10) Word has length 62 [2022-11-19 07:17:02,085 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:17:02,090 INFO L225 Difference]: With dead ends: 485 [2022-11-19 07:17:02,090 INFO L226 Difference]: Without dead ends: 348 [2022-11-19 07:17:02,092 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 196 GetRequests, 142 SyntacticMatches, 1 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 675 ImplicationChecksByTransitivity, 140.8s TimeCoverageRelationStatistics Valid=190, Invalid=2780, Unknown=0, NotChecked=0, Total=2970 [2022-11-19 07:17:02,094 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 198 mSDsluCounter, 2650 mSDsCounter, 0 mSdLazyCounter, 3127 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 201 SdHoareTripleChecker+Valid, 2781 SdHoareTripleChecker+Invalid, 3149 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 3127 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:17:02,094 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [201 Valid, 2781 Invalid, 3149 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [22 Valid, 3127 Invalid, 0 Unknown, 0 Unchecked, 12.1s Time] [2022-11-19 07:17:02,096 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 348 states. [2022-11-19 07:17:02,308 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 348 to 296. [2022-11-19 07:17:02,308 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 296 states, 234 states have (on average 1.547008547008547) internal successors, (362), 237 states have internal predecessors, (362), 42 states have call successors, (42), 21 states have call predecessors, (42), 19 states have return successors, (42), 37 states have call predecessors, (42), 41 states have call successors, (42) [2022-11-19 07:17:02,311 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 296 states to 296 states and 446 transitions. [2022-11-19 07:17:02,311 INFO L78 Accepts]: Start accepts. Automaton has 296 states and 446 transitions. Word has length 62 [2022-11-19 07:17:02,312 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:17:02,312 INFO L495 AbstractCegarLoop]: Abstraction has 296 states and 446 transitions. [2022-11-19 07:17:02,313 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 42 states, 28 states have (on average 1.2142857142857142) internal successors, (34), 25 states have internal predecessors, (34), 12 states have call successors, (13), 9 states have call predecessors, (13), 6 states have return successors, (10), 9 states have call predecessors, (10), 9 states have call successors, (10) [2022-11-19 07:17:02,313 INFO L276 IsEmpty]: Start isEmpty. Operand 296 states and 446 transitions. [2022-11-19 07:17:02,315 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-11-19 07:17:02,315 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:17:02,315 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:17:02,323 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-19 07:17:02,522 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:17:02,523 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:17:02,523 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:17:02,523 INFO L85 PathProgramCache]: Analyzing trace with hash 42617506, now seen corresponding path program 1 times [2022-11-19 07:17:02,523 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:17:02,524 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [925116119] [2022-11-19 07:17:02,524 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:17:02,524 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:17:02,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:17:02,764 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2022-11-19 07:17:02,764 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:17:02,765 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [925116119] [2022-11-19 07:17:02,765 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [925116119] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:17:02,765 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:17:02,765 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-19 07:17:02,766 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [773600393] [2022-11-19 07:17:02,766 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:17:02,766 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-19 07:17:02,767 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:17:02,767 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-19 07:17:02,767 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-19 07:17:02,768 INFO L87 Difference]: Start difference. First operand 296 states and 446 transitions. Second operand has 6 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 1 states have call successors, (13), 1 states have call predecessors, (13), 2 states have return successors, (10), 2 states have call predecessors, (10), 1 states have call successors, (10) [2022-11-19 07:17:03,137 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:17:03,137 INFO L93 Difference]: Finished difference Result 298 states and 451 transitions. [2022-11-19 07:17:03,138 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-19 07:17:03,138 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 1 states have call successors, (13), 1 states have call predecessors, (13), 2 states have return successors, (10), 2 states have call predecessors, (10), 1 states have call successors, (10) Word has length 65 [2022-11-19 07:17:03,139 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:17:03,139 INFO L225 Difference]: With dead ends: 298 [2022-11-19 07:17:03,139 INFO L226 Difference]: Without dead ends: 0 [2022-11-19 07:17:03,140 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-19 07:17:03,141 INFO L413 NwaCegarLoop]: 132 mSDtfsCounter, 63 mSDsluCounter, 461 mSDsCounter, 0 mSdLazyCounter, 144 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 593 SdHoareTripleChecker+Invalid, 144 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 144 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:17:03,142 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 593 Invalid, 144 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 144 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:17:03,143 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-19 07:17:03,143 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-19 07:17:03,144 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:17:03,144 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-19 07:17:03,144 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 65 [2022-11-19 07:17:03,144 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:17:03,145 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-19 07:17:03,145 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 1 states have call successors, (13), 1 states have call predecessors, (13), 2 states have return successors, (10), 2 states have call predecessors, (10), 1 states have call successors, (10) [2022-11-19 07:17:03,145 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-19 07:17:03,145 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-19 07:17:03,148 INFO L805 garLoopResultBuilder]: Registering result SAFE for location outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-19 07:17:03,149 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-19 07:17:03,152 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-19 07:17:41,922 WARN L233 SmtUtils]: Spent 25.31s on a formula simplification. DAG size of input: 599 DAG size of output: 593 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-19 07:18:22,907 INFO L895 garLoopResultBuilder]: At program point L1697(lines 1697 1716) the Hoare annotation is: (or (not (<= 1 |outgoing_#in~client#1|)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~bob~0 |outgoing_#in~client#1|)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (and (<= 0 |outgoing_~tmp~8#1|) (<= ~queued_message~0 0) (= |outgoing_~size~2#1| |outgoing_~tmp~8#1|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (<= 0 ~queued_message~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (<= 1 |outgoing_~msg#1|) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= |outgoing_~client#1| |outgoing_#in~client#1|) (<= |outgoing_~msg#1| 1) (<= |outgoing_~tmp~8#1| 0) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,910 INFO L895 garLoopResultBuilder]: At program point L1694(line 1694) the Hoare annotation is: (or (not (<= 1 |outgoing_#in~client#1|)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |outgoing_#in~msg#1| |outgoing_~msg#1|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= |outgoing_~client#1| |outgoing_#in~client#1|)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~bob~0 |outgoing_#in~client#1|)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,910 INFO L899 garLoopResultBuilder]: For program point L1694-1(line 1694) no Hoare annotation was computed. [2022-11-19 07:18:22,910 INFO L899 garLoopResultBuilder]: For program point outgoingEXIT(lines 1683 1719) no Hoare annotation was computed. [2022-11-19 07:18:22,913 INFO L895 garLoopResultBuilder]: At program point outgoingENTRY(lines 1683 1719) the Hoare annotation is: (or (not (<= 1 |outgoing_#in~client#1|)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~bob~0 |outgoing_#in~client#1|)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,915 INFO L895 garLoopResultBuilder]: At program point L1714(line 1714) the Hoare annotation is: (or (not (<= 1 |outgoing_#in~client#1|)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~bob~0 |outgoing_#in~client#1|)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (and (<= 0 |outgoing_~tmp~8#1|) (<= ~queued_message~0 0) (= |outgoing_~size~2#1| |outgoing_~tmp~8#1|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (<= 0 ~queued_message~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (<= 1 |outgoing_~msg#1|) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= |outgoing_~client#1| |outgoing_#in~client#1|) (<= |outgoing_~msg#1| 1) (<= |outgoing_~tmp~8#1| 0) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,916 INFO L899 garLoopResultBuilder]: For program point L1714-1(lines 1683 1719) no Hoare annotation was computed. [2022-11-19 07:18:22,918 INFO L895 garLoopResultBuilder]: At program point L1709(line 1709) the Hoare annotation is: (or (not (<= 1 |outgoing_#in~client#1|)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~bob~0 |outgoing_#in~client#1|)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,918 INFO L899 garLoopResultBuilder]: For program point L1708(line 1708) no Hoare annotation was computed. [2022-11-19 07:18:22,919 INFO L895 garLoopResultBuilder]: At program point L1709-1(line 1709) the Hoare annotation is: (or (not (<= 1 |outgoing_#in~client#1|)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~bob~0 |outgoing_#in~client#1|)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,920 INFO L895 garLoopResultBuilder]: At program point L1707(line 1707) the Hoare annotation is: (or (not (<= 1 |outgoing_#in~client#1|)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~bob~0 |outgoing_#in~client#1|)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,922 INFO L895 garLoopResultBuilder]: At program point L1706(line 1706) the Hoare annotation is: (or (not (<= 1 |outgoing_#in~client#1|)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~bob~0 |outgoing_#in~client#1|)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,924 INFO L895 garLoopResultBuilder]: At program point L1706-1(line 1706) the Hoare annotation is: (or (not (<= 1 |outgoing_#in~client#1|)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~bob~0 |outgoing_#in~client#1|)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,925 INFO L895 garLoopResultBuilder]: At program point L1704(line 1704) the Hoare annotation is: (or (not (<= 1 |outgoing_#in~client#1|)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~bob~0 |outgoing_#in~client#1|)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,925 INFO L899 garLoopResultBuilder]: For program point L1704-1(line 1704) no Hoare annotation was computed. [2022-11-19 07:18:22,926 INFO L895 garLoopResultBuilder]: At program point L1701(line 1701) the Hoare annotation is: (or (not (<= 1 |outgoing_#in~client#1|)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~bob~0 |outgoing_#in~client#1|)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,926 INFO L899 garLoopResultBuilder]: For program point L1701-1(line 1701) no Hoare annotation was computed. [2022-11-19 07:18:22,926 INFO L899 garLoopResultBuilder]: For program point setEmailToEXIT(lines 2009 2024) no Hoare annotation was computed. [2022-11-19 07:18:22,928 INFO L895 garLoopResultBuilder]: At program point setEmailToENTRY(lines 2009 2024) the Hoare annotation is: (or (not (= |setEmailTo_#in~value| ~rjh~0)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= ~__ste_email_from0~0 0)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (= ~queued_message~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~queued_client~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= |setEmailTo_#in~handle| 1)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (and (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~queue_empty~0 1)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,929 INFO L899 garLoopResultBuilder]: For program point getEmailToEXIT(lines 1990 2008) no Hoare annotation was computed. [2022-11-19 07:18:22,929 INFO L902 garLoopResultBuilder]: At program point getEmailToENTRY(lines 1990 2008) the Hoare annotation is: true [2022-11-19 07:18:22,929 INFO L902 garLoopResultBuilder]: At program point setClientAddressBookSizeENTRY(lines 659 678) the Hoare annotation is: true [2022-11-19 07:18:22,929 INFO L899 garLoopResultBuilder]: For program point setClientAddressBookSizeEXIT(lines 659 678) no Hoare annotation was computed. [2022-11-19 07:18:22,931 INFO L895 garLoopResultBuilder]: At program point L1633(line 1633) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= |sendEmail_createEmail_#in~from#1| 0) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_createEmail_~to#1|) (= |sendEmail_#in~sender#1| |sendEmail_~sender#1|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_~receiver#1|) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= 1 |sendEmail_createEmail_~msg~0#1|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~bob~0 |sendEmail_#in~sender#1|)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= |sendEmail_#in~receiver#1| ~rjh~0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= |old(~__ste_email_from1~0)| 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,934 INFO L895 garLoopResultBuilder]: At program point L1633-1(line 1633) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= |sendEmail_createEmail_#in~from#1| 0) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_createEmail_~to#1|) (= |sendEmail_#in~sender#1| |sendEmail_~sender#1|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_~receiver#1|) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= 1 |sendEmail_createEmail_~msg~0#1|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~bob~0 |sendEmail_#in~sender#1|)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= |sendEmail_#in~receiver#1| ~rjh~0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= |old(~__ste_email_from1~0)| 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,934 INFO L899 garLoopResultBuilder]: For program point sendEmailEXIT(lines 1794 1806) no Hoare annotation was computed. [2022-11-19 07:18:22,937 INFO L895 garLoopResultBuilder]: At program point sendEmailENTRY(lines 1794 1806) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~bob~0 |sendEmail_#in~sender#1|)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= |sendEmail_#in~receiver#1| ~rjh~0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= |old(~__ste_email_from1~0)| 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,937 INFO L899 garLoopResultBuilder]: For program point sendEmailFINAL(lines 1794 1806) no Hoare annotation was computed. [2022-11-19 07:18:22,939 INFO L895 garLoopResultBuilder]: At program point L1802(line 1802) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (and (= |sendEmail_~email~0#1| |sendEmail_~tmp~12#1|) (= |sendEmail_createEmail_#res#1| |sendEmail_createEmail_~retValue_acc~25#1|) (<= ~queued_message~0 0) (= |sendEmail_createEmail_#res#1| |sendEmail_~tmp~12#1|) (<= 0 ~__ste_email_from0~0) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |sendEmail_createEmail_~from#1| ~__ste_email_from0~0) (<= 0 ~queued_message~0) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (<= 1 |sendEmail_~sender#1|) (<= |sendEmail_~sender#1| 1) (= |old(~queue_empty~0)| ~queue_empty~0) (<= ~__ste_email_from0~0 0) (= ~__ste_email_to0~0 |sendEmail_createEmail_~to#1|) (= ~queued_client~0 |old(~queued_client~0)|) (= |sendEmail_createEmail_~retValue_acc~25#1| |sendEmail_createEmail_~msg~0#1|) (<= |sendEmail_createEmail_#in~to#1| 2) (<= 2 |sendEmail_createEmail_#in~to#1|) (<= 2 |sendEmail_createEmail_~to#1|) (<= ~__ste_email_to0~0 2) (= 1 |sendEmail_createEmail_~msg~0#1|)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~bob~0 |sendEmail_#in~sender#1|)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= |sendEmail_#in~receiver#1| ~rjh~0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= |old(~__ste_email_from1~0)| 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,942 INFO L895 garLoopResultBuilder]: At program point L1634(line 1634) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~bob~0 |sendEmail_#in~sender#1|)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= |sendEmail_#in~receiver#1| ~rjh~0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= |old(~__ste_email_from1~0)| 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (and (<= ~queued_message~0 0) (<= 0 ~__ste_email_from0~0) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |sendEmail_createEmail_~from#1| ~__ste_email_from0~0) (<= 0 ~queued_message~0) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (<= 1 |sendEmail_~sender#1|) (<= |sendEmail_~sender#1| 1) (= |old(~queue_empty~0)| ~queue_empty~0) (<= ~__ste_email_from0~0 0) (= ~__ste_email_to0~0 |sendEmail_createEmail_~to#1|) (= ~queued_client~0 |old(~queued_client~0)|) (<= |sendEmail_createEmail_#in~to#1| 2) (<= 2 |sendEmail_createEmail_#in~to#1|) (<= 2 |sendEmail_createEmail_~to#1|) (<= ~__ste_email_to0~0 2) (= 1 |sendEmail_createEmail_~msg~0#1|)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,942 INFO L902 garLoopResultBuilder]: At program point getClientAddressBookSizeENTRY(lines 635 658) the Hoare annotation is: true [2022-11-19 07:18:22,943 INFO L899 garLoopResultBuilder]: For program point getClientAddressBookSizeEXIT(lines 635 658) no Hoare annotation was computed. [2022-11-19 07:18:22,943 INFO L902 garLoopResultBuilder]: At program point getClientAddressBookAddressENTRY(lines 916 984) the Hoare annotation is: true [2022-11-19 07:18:22,943 INFO L899 garLoopResultBuilder]: For program point getClientAddressBookAddressEXIT(lines 916 984) no Hoare annotation was computed. [2022-11-19 07:18:22,943 INFO L902 garLoopResultBuilder]: At program point L1770(line 1770) the Hoare annotation is: true [2022-11-19 07:18:22,943 INFO L899 garLoopResultBuilder]: For program point L1770-1(line 1770) no Hoare annotation was computed. [2022-11-19 07:18:22,943 INFO L899 garLoopResultBuilder]: For program point outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION(line 486) no Hoare annotation was computed. [2022-11-19 07:18:22,944 INFO L899 garLoopResultBuilder]: For program point outgoing__wrappee__AutoResponderEXIT(lines 1671 1682) no Hoare annotation was computed. [2022-11-19 07:18:22,944 INFO L902 garLoopResultBuilder]: At program point L1853(line 1853) the Hoare annotation is: true [2022-11-19 07:18:22,944 INFO L902 garLoopResultBuilder]: At program point L1853-1(line 1853) the Hoare annotation is: true [2022-11-19 07:18:22,944 INFO L902 garLoopResultBuilder]: At program point L1854(lines 1844 1858) the Hoare annotation is: true [2022-11-19 07:18:22,944 INFO L895 garLoopResultBuilder]: At program point L1598(line 1598) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptForward_spec__1_~tmp~14#1| 0)) [2022-11-19 07:18:22,944 INFO L899 garLoopResultBuilder]: For program point L1598-1(line 1598) no Hoare annotation was computed. [2022-11-19 07:18:22,947 INFO L895 garLoopResultBuilder]: At program point L1665(line 1665) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 |old(~queued_message~0)|)) (not (<= 0 |old(~__ste_email_from0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (<= |old(~queued_message~0)| 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (<= |old(~queued_client~0)| 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (and (<= |outgoing__wrappee__AutoResponder_getClientId_~handle#1| 1) (<= |outgoing__wrappee__AutoResponder_~tmp~7#1| 2147483647) (<= |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~22#1| 2147483647) (= |outgoing__wrappee__AutoResponder_mail_#in~client#1| |outgoing__wrappee__AutoResponder_~client#1|) (<= |outgoing__wrappee__AutoResponder_~client#1| 1) (= |outgoing__wrappee__AutoResponder_mail_~client#1| |outgoing__wrappee__AutoResponder_mail_#in~client#1|) (<= ~queued_message~0 0) (<= ~__ste_email_from0~0 2147483647) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (= |outgoing__wrappee__AutoResponder_mail_~msg#1| |outgoing__wrappee__AutoResponder_mail_#in~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483647) (<= ~queue_empty~0 1) (<= 1 |outgoing__wrappee__AutoResponder_~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (<= ~__ste_client_idCounter0~0 2147483647) (<= 1 ~queue_empty~0) (<= 0 ~queued_message~0) (= |outgoing__wrappee__AutoResponder_~msg#1| |outgoing__wrappee__AutoResponder_mail_#in~msg#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_~tmp~7#1| 2147483648)) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483648)) (<= 0 ~queued_client~0) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~22#1| 2147483648)) (<= |outgoing__wrappee__AutoResponder_~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_~handle#1|) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= 1 |outgoing__wrappee__AutoResponder_~client#1|) (<= ~queued_client~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (<= |old(~__ste_email_to0~0)| 2)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (<= 0 |old(~queued_client~0)|)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= |old(~queue_empty~0)| 1)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 2 |old(~__ste_email_to0~0)|)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1)) (not (<= 1 |old(~queue_empty~0)|)) (not (<= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,950 INFO L895 garLoopResultBuilder]: At program point L1665-1(line 1665) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 |old(~queued_message~0)|)) (not (<= 0 |old(~__ste_email_from0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (<= |old(~queued_message~0)| 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (<= |old(~queued_client~0)| 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (<= |old(~__ste_email_to0~0)| 2)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (<= 0 |old(~queued_client~0)|)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (and (<= |outgoing__wrappee__AutoResponder_getClientId_~handle#1| 1) (<= |outgoing__wrappee__AutoResponder_~tmp~7#1| 2147483647) (<= |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~22#1| 2147483647) (<= |outgoing__wrappee__AutoResponder_~client#1| 1) (<= ~queued_message~0 0) (<= ~__ste_email_from0~0 2147483647) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (<= 1 |outgoing__wrappee__AutoResponder_mail_~client#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483647) (<= ~queue_empty~0 1) (<= |outgoing__wrappee__AutoResponder_mail_#in~client#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (<= ~__ste_client_idCounter0~0 2147483647) (<= |outgoing__wrappee__AutoResponder_mail_~client#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~client#1|) (<= 1 ~queue_empty~0) (<= 1 |outgoing__wrappee__AutoResponder_mail_~msg#1|) (<= 0 ~queued_message~0) (<= |outgoing__wrappee__AutoResponder_mail_#t~ret40#1| 2) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~msg#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_~tmp~7#1| 2147483648)) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483648)) (<= 0 ~queued_client~0) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~22#1| 2147483648)) (<= |outgoing__wrappee__AutoResponder_mail_~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_mail_#in~msg#1| 1) (<= 2 |outgoing__wrappee__AutoResponder_mail_#t~ret40#1|) (<= |outgoing__wrappee__AutoResponder_~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_~handle#1|) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= 1 |outgoing__wrappee__AutoResponder_~client#1|) (<= ~queued_client~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= |old(~queue_empty~0)| 1)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 2 |old(~__ste_email_to0~0)|)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1)) (not (<= 1 |old(~queue_empty~0)|)) (not (<= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,950 INFO L899 garLoopResultBuilder]: For program point L1748(lines 1748 1754) no Hoare annotation was computed. [2022-11-19 07:18:22,951 INFO L902 garLoopResultBuilder]: At program point L1748-2(lines 1740 1757) the Hoare annotation is: true [2022-11-19 07:18:22,953 INFO L895 garLoopResultBuilder]: At program point outgoing__wrappee__AutoResponderENTRY(lines 1671 1682) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 |old(~queued_message~0)|)) (not (<= 0 |old(~__ste_email_from0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (<= |old(~queued_message~0)| 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (<= |old(~queued_client~0)| 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (<= |old(~__ste_email_to0~0)| 2)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (<= 0 |old(~queued_client~0)|)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= |old(~queue_empty~0)| 1)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 2 |old(~__ste_email_to0~0)|)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1)) (not (<= 1 |old(~queue_empty~0)|)) (not (<= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,953 INFO L895 garLoopResultBuilder]: At program point L486(line 486) the Hoare annotation is: false [2022-11-19 07:18:22,953 INFO L895 garLoopResultBuilder]: At program point L1601(line 1601) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptForward_spec__1_~tmp~14#1| 0)) [2022-11-19 07:18:22,954 INFO L895 garLoopResultBuilder]: At program point L1601-1(line 1601) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptForward_spec__1_~tmp~14#1| 0)) [2022-11-19 07:18:22,954 INFO L899 garLoopResultBuilder]: For program point L2295-1(line 2295) no Hoare annotation was computed. [2022-11-19 07:18:22,954 INFO L902 garLoopResultBuilder]: At program point L2295(line 2295) the Hoare annotation is: true [2022-11-19 07:18:22,956 INFO L895 garLoopResultBuilder]: At program point L1677(line 1677) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 |old(~queued_message~0)|)) (not (<= 0 |old(~__ste_email_from0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (<= |old(~queued_message~0)| 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (<= |old(~queued_client~0)| 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (<= |old(~__ste_email_to0~0)| 2)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (<= 0 |old(~queued_client~0)|)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= |old(~queue_empty~0)| 1)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (and (<= |outgoing__wrappee__AutoResponder_~tmp~7#1| 2147483647) (= ~queued_message~0 |old(~queued_message~0)|) (= |outgoing__wrappee__AutoResponder_~client#1| |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |outgoing__wrappee__AutoResponder_getClientId_~handle#1| |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (= |outgoing__wrappee__AutoResponder_getClientId_#res#1| |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~22#1|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= ~__ste_client_idCounter0~0 |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~22#1|) (= |outgoing__wrappee__AutoResponder_~client#1| |outgoing__wrappee__AutoResponder_#in~client#1|) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |outgoing__wrappee__AutoResponder_~tmp~7#1| |outgoing__wrappee__AutoResponder_getClientId_#res#1|) (= |old(~queue_empty~0)| ~queue_empty~0) (<= 0 (+ |outgoing__wrappee__AutoResponder_~tmp~7#1| 2147483648)) (= ~queued_client~0 |old(~queued_client~0)|) (= |outgoing__wrappee__AutoResponder_~msg#1| |outgoing__wrappee__AutoResponder_#in~msg#1|)) (not (<= 2 |old(~__ste_email_to0~0)|)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1)) (not (<= 1 |old(~queue_empty~0)|)) (not (<= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-19 07:18:22,957 INFO L899 garLoopResultBuilder]: For program point L1677-1(line 1677) no Hoare annotation was computed. [2022-11-19 07:18:22,957 INFO L899 garLoopResultBuilder]: For program point L1768(lines 1768 1775) no Hoare annotation was computed. [2022-11-19 07:18:22,957 INFO L902 garLoopResultBuilder]: At program point L1768-2(lines 1758 1778) the Hoare annotation is: true [2022-11-19 07:18:22,957 INFO L902 garLoopResultBuilder]: At program point L1851(line 1851) the Hoare annotation is: true [2022-11-19 07:18:22,958 INFO L895 garLoopResultBuilder]: At program point L1595(line 1595) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptForward_spec__1_~tmp~14#1| 0)) [2022-11-19 07:18:22,958 INFO L899 garLoopResultBuilder]: For program point L1851-1(line 1851) no Hoare annotation was computed. [2022-11-19 07:18:22,958 INFO L899 garLoopResultBuilder]: For program point L1595-1(line 1595) no Hoare annotation was computed. [2022-11-19 07:18:22,958 INFO L899 garLoopResultBuilder]: For program point L2297(lines 2297 2303) no Hoare annotation was computed. [2022-11-19 07:18:22,958 INFO L895 garLoopResultBuilder]: At program point L2297-2(lines 2289 2306) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptForward_spec__1_~tmp~14#1| 0)) [2022-11-19 07:18:22,958 INFO L895 garLoopResultBuilder]: At program point L1876(line 1876) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptForward_spec__1_~tmp~14#1| 0)) [2022-11-19 07:18:22,958 INFO L895 garLoopResultBuilder]: At program point L1876-1(lines 1867 1880) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptForward_spec__1_~tmp~14#1| 0)) [2022-11-19 07:18:22,962 INFO L895 garLoopResultBuilder]: At program point setEmailFromENTRY(lines 1972 1987) the Hoare annotation is: (or (and (<= 0 ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (<= ~__ste_email_from0~0 0)) (and (not (= ~__ste_client_idCounter0~0 |setEmailFrom_#in~value|)) (not (= ~__ste_email_to0~0 0))) (let ((.cse0 (not (<= ~__ste_client_privateKey0~0 0))) (.cse1 (not (<= 0 ~queued_client~0))) (.cse2 (not (<= 0 ~__ste_email_subject0~0.offset))) (.cse3 (not (<= 0 ~__ste_Client_AddressBook2_Address1~0))) (.cse4 (not (<= 0 ~__ste_email_body0~0.base))) (.cse5 (not (<= ~__ste_email_isEncrypted1~0 0))) (.cse6 (not (<= 0 ~__ste_client_privateKey0~0))) (.cse7 (not (<= ~__ste_email_subject1~0.offset 0))) (.cse8 (not (<= ~__ste_Client_Keyring0_User2~0 0))) (.cse9 (not (<= 0 |old(~__ste_email_from0~0)|))) (.cse10 (not (<= ~__ste_email_signKey1~0 0))) (.cse11 (not (<= ~__SELECTED_FEATURE_Verify~0 0))) (.cse12 (not (<= 0 ~__ste_email_subject1~0.offset))) (.cse13 (not (<= 0 ~__ste_Client_AddressBook1_Address1~0))) (.cse14 (not (<= 0 ~__ste_Client_Keyring0_PublicKey1~0))) (.cse15 (not (<= 0 ~__ste_Client_AddressBook0_Alias0~0))) (.cse16 (not (<= 0 ~head~0.base))) (.cse17 (not (<= 0 ~__ste_ClientKeyring_size2~0))) (.cse18 (not (<= |setEmailFrom_#in~handle| 1))) (.cse19 (not (<= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse20 (not (<= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse21 (not (<= 0 |#NULL.offset|))) (.cse22 (not (<= ~__SELECTED_FEATURE_Sign~0 0))) (.cse23 (not (<= 0 ~__ste_Client_counter~0))) (.cse24 (not (<= ~__ste_client_privateKey1~0 0))) (.cse25 (not (<= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse26 (not (<= 0 ~__ste_client_forwardReceiver1~0))) (.cse27 (not (<= 0 ~__ste_client_privateKey1~0))) (.cse28 (not (<= ~queued_message~0 0))) (.cse29 (not (<= 0 ~__ste_email_id1~0))) (.cse30 (not (<= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse31 (not (<= 3 ~chuck~0))) (.cse32 (not (<= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse33 (not (<= 0 ~__ste_Client_AddressBook2_Address2~0))) (.cse34 (not (<= 0 ~__ste_email_body0~0.offset))) (.cse35 (not (<= ~__ste_ClientAddressBook_size1~0 0))) (.cse36 (not (<= 0 ~__ste_Client_Keyring0_User0~0))) (.cse37 (not (<= 0 ~__ste_email_body1~0.offset))) (.cse38 (not (<= 0 ~__ste_Client_AddressBook2_Alias2~0))) (.cse39 (not (<= 0 ~__ste_email_encryptionKey0~0))) (.cse40 (not (<= 0 ~__ste_client_outbuffer3~0))) (.cse41 (not (<= 0 ~__ste_Client_Keyring1_User2~0))) (.cse42 (not (<= ~__ste_ClientKeyring_size0~0 0))) (.cse43 (not (<= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse44 (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0))) (.cse45 (not (<= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse46 (not (<= 0 ~__ste_Client_AddressBook2_Address0~0))) (.cse47 (not (<= ~__ste_client_outbuffer1~0 0))) (.cse48 (not (<= 0 ~__GUIDSL_ROOT_PRODUCTION~0))) (.cse49 (not (<= ~head~0.base 0))) (.cse50 (not (<= 0 ~__ste_Client_Keyring1_User1~0))) (.cse51 (not (<= ~__ste_email_body1~0.base 0))) (.cse52 (not (<= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse53 (not (<= 0 ~__ste_Client_AddressBook2_Alias0~0))) (.cse54 (not (<= 2 ~rjh~0))) (.cse55 (not (<= ~bob~0 1))) (.cse56 (not (<= ~__ste_client_outbuffer2~0 0))) (.cse57 (not (<= 0 ~__ste_ClientKeyring_size1~0))) (.cse58 (not (<= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse59 (not (<= 0 ~__SELECTED_FEATURE_AutoResponder~0))) (.cse60 (not (<= ~__ste_Client_Keyring1_User1~0 0))) (.cse61 (not (<= ~__ste_ClientAddressBook_size0~0 0))) (.cse62 (not (<= ~rjh~0 2))) (.cse63 (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0))) (.cse64 (not (<= 0 ~__ste_client_name2~0.base))) (.cse65 (not (<= 0 ~__ste_client_outbuffer2~0))) (.cse66 (not (<= 0 ~__ste_email_isSignatureVerified0~0))) (.cse67 (not (<= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse68 (not (<= 0 ~__ste_Client_Keyring2_PublicKey0~0))) (.cse69 (not (<= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse70 (not (<= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse71 (not (<= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse72 (not (<= 0 ~__SELECTED_FEATURE_Decrypt~0))) (.cse73 (not (<= ~__ste_client_name2~0.base 0))) (.cse74 (not (<= 0 ~queued_message~0))) (.cse75 (not (<= 0 ~__ste_email_subject1~0.base))) (.cse76 (not (<= 0 ~__ste_client_name1~0.offset))) (.cse77 (not (<= ~__ste_email_body0~0.base 0))) (.cse78 (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0))) (.cse79 (not (<= 0 ~__ste_Client_Keyring0_PublicKey2~0))) (.cse80 (not (<= ~__ste_email_encryptionKey1~0 0))) (.cse81 (not (<= 0 ~__GUIDSL_NON_TERMINAL_main~0))) (.cse82 (not (<= ~__ste_client_name2~0.offset 0))) (.cse83 (not (<= 1 ~bob~0))) (.cse84 (not (<= ~__ste_email_subject0~0.base 0))) (.cse85 (not (<= 0 ~__ste_Client_Keyring2_User1~0))) (.cse86 (not (<= ~__ste_ClientAddressBook_size2~0 0))) (.cse87 (not (<= 1 |setEmailFrom_#in~handle|))) (.cse88 (not (<= ~head~0.offset 0))) (.cse89 (not (<= 0 ~__SELECTED_FEATURE_Sign~0))) (.cse90 (not (<= 0 ~__ste_client_name2~0.offset))) (.cse91 (not (<= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse92 (not (<= ~__ste_client_forwardReceiver3~0 0))) (.cse93 (not (<= ~__ste_Client_Keyring2_User0~0 0))) (.cse94 (not (<= 0 ~__ste_email_isSignatureVerified1~0))) (.cse95 (not (<= ~__ste_ClientKeyring_size2~0 0))) (.cse96 (not (<= 0 ~__ste_email_signKey1~0))) (.cse97 (not (<= 0 ~__ste_client_outbuffer1~0))) (.cse98 (not (<= 0 ~__ste_ClientAddressBook_size1~0))) (.cse99 (not (<= 0 ~__ste_Client_AddressBook1_Alias1~0))) (.cse100 (not (<= 0 ~__ste_client_name0~0.base))) (.cse101 (not (<= ~__ste_client_outbuffer3~0 0))) (.cse102 (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0))) (.cse103 (not (<= ~__ste_Client_counter~0 0))) (.cse104 (not (<= ~__ste_client_outbuffer0~0 0))) (.cse105 (not (<= ~__ste_client_name0~0.offset 0))) (.cse106 (not (<= ~__ste_email_id1~0 0))) (.cse107 (not (<= ~__ste_client_name1~0.offset 0))) (.cse108 (not (<= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse109 (not (<= ~__ste_client_privateKey2~0 0))) (.cse110 (not (<= 0 ~__ste_email_isSigned0~0))) (.cse111 (not (<= 0 ~__ste_client_autoResponse2~0))) (.cse112 (not (<= 1 ~queue_empty~0))) (.cse113 (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse114 (not (<= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse115 (not (<= 0 ~__ste_client_forwardReceiver0~0))) (.cse116 (not (<= ~__ste_client_autoResponse0~0 0))) (.cse117 (not (<= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse118 (not (<= 0 ~__ste_client_privateKey2~0))) (.cse119 (not (<= ~__ste_ClientKeyring_size1~0 0))) (.cse120 (not (<= ~__ste_client_name0~0.base 0))) (.cse121 (not (<= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse122 (not (<= 0 ~__ste_Client_AddressBook1_Address0~0))) (.cse123 (not (<= 0 ~__ste_Client_Keyring0_User2~0))) (.cse124 (not (<= |#NULL.offset| 0))) (.cse125 (not (<= ~__ste_Client_AddressBook0_Address1~0 0))) (.cse126 (not (<= 0 ~__ste_client_forwardReceiver2~0))) (.cse127 (not (<= ~__ste_email_subject0~0.offset 0))) (.cse128 (not (<= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse129 (not (<= 0 ~__ste_Email_counter~0))) (.cse130 (not (<= 0 ~__SELECTED_FEATURE_Encrypt~0))) (.cse131 (not (<= 0 ~__ste_Client_Keyring2_User0~0))) (.cse132 (not (<= ~__ste_Client_Keyring1_User0~0 0))) (.cse133 (not (<= 0 ~__ste_email_isEncrypted1~0))) (.cse134 (not (<= 0 |#NULL.base|))) (.cse135 (not (<= 0 ~__ste_ClientKeyring_size0~0))) (.cse136 (not (<= ~__ste_Client_AddressBook0_Address2~0 0))) (.cse137 (not (<= ~chuck~0 3))) (.cse138 (not (<= ~__SELECTED_FEATURE_Forward~0 0))) (.cse139 (not (<= 0 ~__SELECTED_FEATURE_Verify~0))) (.cse140 (not (<= ~__ste_Client_Keyring2_User1~0 0))) (.cse141 (not (<= 0 ~__ste_client_forwardReceiver3~0))) (.cse142 (not (<= 0 ~__ste_Client_AddressBook2_Alias1~0))) (.cse143 (not (<= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse144 (not (<= ~__ste_Client_Keyring2_User2~0 0))) (.cse145 (not (<= 0 ~__ste_email_isSigned1~0))) (.cse146 (not (<= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse147 (not (<= 0 ~__ste_email_body1~0.base))) (.cse148 (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0))) (.cse149 (not (<= ~__ste_email_isSigned1~0 0))) (.cse150 (not (<= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse151 (not (<= ~__ste_client_forwardReceiver2~0 0))) (.cse152 (not (<= 0 ~__ste_Client_Keyring2_User2~0))) (.cse153 (not (<= ~__SELECTED_FEATURE_Keys~0 0))) (.cse154 (not (<= 0 ~__ste_Client_Keyring2_PublicKey1~0))) (.cse155 (not (<= 0 ~__SELECTED_FEATURE_Base~0))) (.cse156 (not (<= 0 ~__ste_ClientAddressBook_size2~0))) (.cse157 (not (<= 0 ~__SELECTED_FEATURE_Forward~0))) (.cse158 (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0))) (.cse159 (not (<= ~__ste_email_body0~0.offset 0))) (.cse160 (not (<= 0 ~__ste_client_name1~0.base))) (.cse161 (not (<= ~queue_empty~0 1))) (.cse162 (not (<= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse163 (not (<= ~__ste_Client_AddressBook0_Address0~0 0))) (.cse164 (not (<= 0 ~__ste_email_encryptionKey1~0))) (.cse165 (not (<= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse166 (not (<= ~__ste_client_idCounter2~0 3))) (.cse167 (not (<= 0 ~__ste_Client_Keyring0_User1~0))) (.cse168 (not (<= 0 ~__ste_Client_AddressBook0_Alias1~0))) (.cse169 (not (<= 0 ~__ste_email_id0~0))) (.cse170 (not (<= ~__ste_email_subject1~0.base 0))) (.cse171 (not (<= 0 |#StackHeapBarrier|))) (.cse172 (not (<= ~__ste_email_isSignatureVerified0~0 0))) (.cse173 (not (<= ~__SELECTED_FEATURE_Base~0 0))) (.cse174 (not (<= 0 ~__ste_Client_Keyring1_PublicKey0~0))) (.cse175 (not (<= 0 ~__ste_ClientAddressBook_size0~0))) (.cse176 (not (<= 0 ~__SELECTED_FEATURE_Keys~0))) (.cse177 (not (<= |old(~__ste_email_from0~0)| 0))) (.cse178 (not (<= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse179 (not (<= ~__ste_client_forwardReceiver1~0 0))) (.cse180 (not (<= ~__ste_email_body1~0.offset 0))) (.cse181 (not (<= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse182 (not (<= ~__ste_email_isEncrypted0~0 0))) (.cse183 (not (<= ~__ste_client_autoResponse2~0 0))) (.cse184 (not (<= ~queued_client~0 0))) (.cse185 (not (<= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse186 (not (<= 0 ~__ste_Client_Keyring1_User0~0))) (.cse187 (not (<= 0 ~__ste_client_name0~0.offset))) (.cse188 (not (<= 0 ~__ste_client_outbuffer0~0))) (.cse189 (not (<= 0 ~__ste_client_autoResponse1~0))) (.cse190 (not (<= ~__ste_email_encryptionKey0~0 0))) (.cse191 (not (<= 0 ~__ste_client_autoResponse0~0))) (.cse192 (not (<= ~__ste_Client_Keyring0_User0~0 0))) (.cse193 (not (<= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse194 (not (<= 0 ~head~0.offset))) (.cse195 (not (<= |#NULL.base| 0))) (.cse196 (not (<= ~__ste_client_name1~0.base 0))) (.cse197 (not (<= ~__ste_email_isSignatureVerified1~0 0))) (.cse198 (not (<= ~__ste_Email_counter~0 0))) (.cse199 (not (<= 0 ~__ste_email_signKey0~0))) (.cse200 (not (<= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse201 (not (<= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse202 (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse203 (not (<= ~__ste_Client_Keyring1_User2~0 0))) (.cse204 (not (<= 0 ~__ste_Client_Keyring2_PublicKey2~0))) (.cse205 (not (<= ~__ste_Client_Keyring0_User1~0 0))) (.cse206 (not (<= ~__ste_email_isSigned0~0 0))) (.cse207 (not (<= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse208 (not (<= ~__ste_email_id0~0 0))) (.cse209 (not (<= 0 ~__ste_Client_Keyring1_PublicKey1~0))) (.cse210 (not (<= ~__ste_email_signKey0~0 0))) (.cse211 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse212 (not (<= 0 ~__ste_email_isEncrypted0~0))) (.cse213 (not (<= 0 ~__ste_Client_AddressBook1_Address2~0))) (.cse214 (not (<= ~__ste_client_forwardReceiver0~0 0))) (.cse215 (not (<= 0 ~__ste_email_subject0~0.base)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 (not (<= ~__ste_email_to0~0 0)) .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 (not (<= 0 ~__ste_email_to0~0)) .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 (not (<= 0 |setEmailFrom_#in~value|)) .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120 .cse121 (not (<= 0 |old(~__ste_email_from1~0)|)) .cse122 .cse123 .cse124 .cse125 .cse126 .cse127 .cse128 .cse129 .cse130 .cse131 .cse132 .cse133 .cse134 .cse135 .cse136 .cse137 .cse138 .cse139 (not (<= |setEmailFrom_#in~value| 0)) .cse140 .cse141 .cse142 .cse143 .cse144 .cse145 .cse146 .cse147 .cse148 .cse149 .cse150 .cse151 .cse152 .cse153 .cse154 .cse155 .cse156 .cse157 .cse158 .cse159 (not (<= |old(~__ste_email_from1~0)| 0)) .cse160 .cse161 .cse162 .cse163 .cse164 .cse165 .cse166 .cse167 .cse168 .cse169 .cse170 .cse171 .cse172 .cse173 .cse174 .cse175 .cse176 .cse177 .cse178 .cse179 .cse180 .cse181 .cse182 .cse183 .cse184 .cse185 .cse186 .cse187 .cse188 .cse189 .cse190 .cse191 .cse192 (not (<= ~__ste_email_to1~0 0)) .cse193 .cse194 .cse195 .cse196 .cse197 .cse198 .cse199 .cse200 .cse201 .cse202 .cse203 .cse204 .cse205 .cse206 .cse207 .cse208 .cse209 .cse210 .cse211 .cse212 .cse213 (not (<= 0 ~__ste_email_to1~0)) .cse214 .cse215) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not (<= |setEmailFrom_#in~value| 2147483647)) .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 (not (<= ~__ste_email_to0~0 2)) .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 (not (<= 2 ~__ste_email_to0~0)) .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120 .cse121 .cse122 .cse123 .cse124 .cse125 .cse126 .cse127 .cse128 .cse129 .cse130 .cse131 .cse132 (not (<= 0 (+ ~__ste_client_idCounter0~0 2147483648))) .cse133 .cse134 .cse135 .cse136 .cse137 .cse138 .cse139 .cse140 .cse141 .cse142 .cse143 .cse144 .cse145 .cse146 .cse147 .cse148 .cse149 .cse150 .cse151 .cse152 .cse153 .cse154 .cse155 .cse156 .cse157 .cse158 .cse159 .cse160 .cse161 .cse162 .cse163 .cse164 .cse165 .cse166 .cse167 .cse168 .cse169 .cse170 .cse171 .cse172 .cse173 .cse174 .cse175 .cse176 .cse177 .cse178 .cse179 .cse180 .cse181 .cse182 .cse183 .cse184 .cse185 .cse186 .cse187 .cse188 .cse189 .cse190 .cse191 .cse192 .cse193 .cse194 .cse195 .cse196 .cse197 .cse198 .cse199 .cse200 .cse201 .cse202 .cse203 .cse204 .cse205 .cse206 .cse207 .cse208 .cse209 .cse210 .cse211 .cse212 .cse213 .cse214 .cse215)))) [2022-11-19 07:18:22,962 INFO L899 garLoopResultBuilder]: For program point setEmailFromEXIT(lines 1972 1987) no Hoare annotation was computed. [2022-11-19 07:18:22,963 INFO L895 garLoopResultBuilder]: At program point L2430(lines 2417 2494) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,963 INFO L895 garLoopResultBuilder]: At program point L2645(lines 2637 2649) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,963 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-19 07:18:22,963 INFO L899 garLoopResultBuilder]: For program point L2399(lines 2399 2403) no Hoare annotation was computed. [2022-11-19 07:18:22,963 INFO L899 garLoopResultBuilder]: For program point L2482(lines 2482 2486) no Hoare annotation was computed. [2022-11-19 07:18:22,963 INFO L895 garLoopResultBuilder]: At program point L2416(lines 2406 2495) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,964 INFO L895 garLoopResultBuilder]: At program point L2482-1(lines 2351 2500) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,964 INFO L895 garLoopResultBuilder]: At program point L2383(lines 2370 2498) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,964 INFO L895 garLoopResultBuilder]: At program point L2466(lines 2456 2491) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,964 INFO L895 garLoopResultBuilder]: At program point L2566(line 2566) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,964 INFO L902 garLoopResultBuilder]: At program point L2566-1(lines 2549 2571) the Hoare annotation is: true [2022-11-19 07:18:22,964 INFO L899 garLoopResultBuilder]: For program point L2616(lines 2616 2623) no Hoare annotation was computed. [2022-11-19 07:18:22,965 INFO L902 garLoopResultBuilder]: At program point L2616-2(lines 2616 2623) the Hoare annotation is: true [2022-11-19 07:18:22,965 INFO L899 garLoopResultBuilder]: For program point L2352(lines 2351 2500) no Hoare annotation was computed. [2022-11-19 07:18:22,966 INFO L895 garLoopResultBuilder]: At program point L2534(line 2534) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 30) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= ~__ste_client_autoResponse1~0 0) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~41#1|)) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| ~rjh~0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__SELECTED_FEATURE_Forward~0 0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~41#1| 2147483647) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= ~__ste_client_idCounter0~0 1) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= |ULTIMATE.start_valid_product_~retValue_acc~1#1| 1) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (<= 1 ~__ste_client_idCounter0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= |ULTIMATE.start_main_~tmp~17#1| 1) (= ~__ste_email_signKey1~0 0)) [2022-11-19 07:18:22,968 INFO L895 garLoopResultBuilder]: At program point L2534-1(lines 2529 2538) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 30) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (= 0 ~__ste_email_subject0~0.base) (<= ~__ste_client_idCounter1~0 2) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~41#1|)) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~__ste_Client_AddressBook1_Alias2~0 0) (<= 2 ~__ste_client_idCounter1~0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~41#1| 2147483647) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= |ULTIMATE.start_valid_product_~retValue_acc~1#1| 1) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= |ULTIMATE.start_main_~tmp~17#1| 1) (= ~__ste_email_signKey1~0 0)) [2022-11-19 07:18:22,968 INFO L895 garLoopResultBuilder]: At program point L2501(lines 2350 2502) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,968 INFO L899 garLoopResultBuilder]: For program point L2435(lines 2435 2439) no Hoare annotation was computed. [2022-11-19 07:18:22,968 INFO L895 garLoopResultBuilder]: At program point L2369(lines 2359 2499) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,968 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-19 07:18:22,969 INFO L899 garLoopResultBuilder]: For program point L2388(lines 2388 2392) no Hoare annotation was computed. [2022-11-19 07:18:22,969 INFO L895 garLoopResultBuilder]: At program point L2421(lines 2421 2428) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,969 INFO L899 garLoopResultBuilder]: For program point L2471(lines 2471 2475) no Hoare annotation was computed. [2022-11-19 07:18:22,969 INFO L895 garLoopResultBuilder]: At program point L2405(lines 2395 2496) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,969 INFO L895 garLoopResultBuilder]: At program point L2455(lines 2442 2492) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,969 INFO L895 garLoopResultBuilder]: At program point L2374(lines 2374 2381) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,970 INFO L895 garLoopResultBuilder]: At program point L2441(lines 2431 2493) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,972 INFO L895 garLoopResultBuilder]: At program point L2524(line 2524) the Hoare annotation is: (let ((.cse1 (select |#memory_int| 1)) (.cse0 (select |#memory_int| 16))) (and (= (select |#length| 15) 25) (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= 9 (select |#length| 5)) (= (select |#length| 9) 21) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= 115 (select .cse0 1)) (= 30 (select |#length| 7)) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= (select |#valid| 30) 1) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (= (select |#length| 32) 11) (= 4 (select |#length| 16)) (= ~__ste_Client_counter~0 0) (= ~rjh~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= (select |#valid| 26) 1) (= 9 (select |#length| 30)) (= ~__ste_client_autoResponse1~0 0) (= 12 (select |#length| 18)) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (= (select |#valid| 9) 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= (select |#length| 12) 25) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~41#1|)) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= (select |#valid| 11) 1) (= ~__ste_Client_AddressBook1_Address2~0 0) (= (select |#valid| 27) 1) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= 30 (select |#length| 23)) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= |ULTIMATE.start_setup_bob_#in~bob___0#1| ~bob~0) (= 30 (select |#length| 4)) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= (select .cse0 2) 10) (= ~head~0.offset 0) (= 44 (select |#length| 29)) (= ~__ste_client_name0~0.offset 0) (= (select |#length| 19) 10) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= 2 (select |#length| 1)) (= (select |#length| 8) 9) (= ~__ste_client_idCounter1~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= (select |#length| 22) 34) (= (select |#valid| 3) 1) (= ~__ste_email_signKey0~0 0) (= (select |#valid| 7) 1) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= (select |#valid| 18) 1) (= (select |#valid| 22) 1) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= 30 (select |#length| 13)) (= ~__SELECTED_FEATURE_Forward~0 0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= (select |#valid| 24) 1) (= 30 (select |#length| 10)) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (= (select |#valid| 12) 1) (= (select |#valid| 32) 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (= 9 (select |#length| 31)) (= (select |#valid| 28) 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= (select |#length| 24) 16) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= (select |#valid| 4) 1) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= (select |#valid| 1) 1) (= ~__ste_client_forwardReceiver0~0 0) (= (select |#valid| 20) 1) (= 21 (select |#length| 26)) (= (select |#length| 27) 16) (= ~__ste_Client_Keyring2_User0~0 0) (= (select |#length| 6) 21) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= (select |#valid| 21) 1) (= ~__ste_Client_AddressBook1_Address0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~41#1| 2147483647) (= ~__ste_client_idCounter2~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (= 28 (select |#length| 2)) (= (select |#valid| 14) 1) (= ~__ste_email_subject1~0.base 0) (= |ULTIMATE.start_valid_product_~retValue_acc~1#1| |ULTIMATE.start_valid_product_#res#1|) (= 9 (select |#length| 14)) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= (select |#valid| 0) 0) (= ~__ste_Client_Keyring2_User2~0 0) (= (select |#valid| 25) 1) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= (select |#valid| 2) 1) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= 9 (select |#length| 11)) (= |ULTIMATE.start_valid_product_~retValue_acc~1#1| 1) (= (select .cse1 0) 48) (= ~__ste_email_subject1~0.offset 0) (= (select |#valid| 23) 1) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= 22 (select |#length| 25)) (= (select |#length| 20) 18) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= ~__ste_client_idCounter0~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= (select |#valid| 19) 1) (= (select |#valid| 31) 1) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= (select |#valid| 16) 1) (= (select .cse0 0) 37) (= (select |#valid| 6) 1) (= ~chuck~0 0) (= (select .cse1 1) 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= |ULTIMATE.start_setup_bob_#in~bob___0#1| |ULTIMATE.start_setup_bob_~bob___0#1|) (= 44 (select |#length| 28)) (= ~__ste_client_outbuffer2~0 0) (= (select |#length| 17) 10) (= (select |#valid| 29) 1) (= (select |#length| 21) 10) (= ~__ste_ClientAddressBook_size2~0 0) (= (select |#valid| 17) 1) (= (select .cse0 3) 0) (= (select |#valid| 10) 1) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= (select |#valid| 8) 1) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0) (= |ULTIMATE.start_main_~tmp~17#1| 1) (= ~__ste_email_signKey1~0 0))) [2022-11-19 07:18:22,973 INFO L895 garLoopResultBuilder]: At program point L2557-1(line 2557) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,973 INFO L895 garLoopResultBuilder]: At program point L2557(line 2557) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,974 INFO L895 garLoopResultBuilder]: At program point L2524-1(lines 2519 2528) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~rjh~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= ~__ste_client_autoResponse1~0 0) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~41#1|)) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~41#1| 2147483647) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= ~__ste_client_idCounter0~0 1) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= |ULTIMATE.start_valid_product_~retValue_acc~1#1| 1) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (<= 1 ~__ste_client_idCounter0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= |ULTIMATE.start_main_~tmp~17#1| 1) (= ~__ste_email_signKey1~0 0)) [2022-11-19 07:18:22,974 INFO L899 garLoopResultBuilder]: For program point L2359(lines 2359 2499) no Hoare annotation was computed. [2022-11-19 07:18:22,975 INFO L899 garLoopResultBuilder]: For program point L2410(lines 2410 2414) no Hoare annotation was computed. [2022-11-19 07:18:22,975 INFO L899 garLoopResultBuilder]: For program point L2460(lines 2460 2464) no Hoare annotation was computed. [2022-11-19 07:18:22,975 INFO L895 garLoopResultBuilder]: At program point L2394(lines 2384 2497) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,975 INFO L895 garLoopResultBuilder]: At program point L2642(line 2642) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,975 INFO L895 garLoopResultBuilder]: At program point L2642-1(line 2642) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,975 INFO L895 garLoopResultBuilder]: At program point L2477(lines 2467 2490) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,975 INFO L895 garLoopResultBuilder]: At program point L2560(lines 2560 2568) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,977 INFO L895 garLoopResultBuilder]: At program point L2544(line 2544) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.offset| 0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 30) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (= 0 ~__ste_email_subject0~0.base) (<= ~__ste_client_idCounter1~0 2) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~41#1|)) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| ~chuck~0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| |ULTIMATE.start_setup_chuck_~chuck___0#1|) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.base| 31) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= 3 ~chuck~0) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~__ste_Client_AddressBook1_Alias2~0 0) (<= 2 ~__ste_client_idCounter1~0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~41#1| 2147483647) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= |ULTIMATE.start_valid_product_~retValue_acc~1#1| 1) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= |ULTIMATE.start_main_~tmp~17#1| 1) (= ~__ste_email_signKey1~0 0)) [2022-11-19 07:18:22,979 INFO L895 garLoopResultBuilder]: At program point L2544-1(lines 2539 2548) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.offset| 0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 30) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (<= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| 3) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~41#1|)) (<= ~__ste_client_idCounter2~0 3) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (<= 3 ~__ste_client_idCounter2~0) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.base| 31) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= 3 ~chuck~0) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (<= 3 |ULTIMATE.start_setup_chuck_~chuck___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (<= 3 |ULTIMATE.start_setup_chuck_#in~chuck___0#1|) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~41#1| 2147483647) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (= ~head~0.base 0) (<= |ULTIMATE.start_setup_chuck_~chuck___0#1| 3) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= |ULTIMATE.start_valid_product_~retValue_acc~1#1| 1) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= |ULTIMATE.start_main_~tmp~17#1| 1) (= ~__ste_email_signKey1~0 0)) [2022-11-19 07:18:22,979 INFO L899 garLoopResultBuilder]: For program point L2363(lines 2363 2367) no Hoare annotation was computed. [2022-11-19 07:18:22,979 INFO L895 garLoopResultBuilder]: At program point L2644(line 2644) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,979 INFO L895 garLoopResultBuilder]: At program point L2644-1(line 2644) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~17#1| 1) [2022-11-19 07:18:22,979 INFO L899 garLoopResultBuilder]: For program point L2446(lines 2446 2453) no Hoare annotation was computed. [2022-11-19 07:18:22,980 INFO L899 garLoopResultBuilder]: For program point getEmailFromEXIT(lines 1953 1971) no Hoare annotation was computed. [2022-11-19 07:18:22,980 INFO L902 garLoopResultBuilder]: At program point getEmailFromENTRY(lines 1953 1971) the Hoare annotation is: true [2022-11-19 07:18:22,980 INFO L902 garLoopResultBuilder]: At program point setClientAddressBookAddressENTRY(lines 985 1040) the Hoare annotation is: true [2022-11-19 07:18:22,980 INFO L899 garLoopResultBuilder]: For program point setClientAddressBookAddressEXIT(lines 985 1040) no Hoare annotation was computed. [2022-11-19 07:18:22,980 INFO L899 garLoopResultBuilder]: For program point isReadableEXIT(lines 1608 1616) no Hoare annotation was computed. [2022-11-19 07:18:22,980 INFO L902 garLoopResultBuilder]: At program point isReadableENTRY(lines 1608 1616) the Hoare annotation is: true [2022-11-19 07:18:22,981 INFO L902 garLoopResultBuilder]: At program point queueENTRY(lines 1807 1816) the Hoare annotation is: true [2022-11-19 07:18:22,981 INFO L899 garLoopResultBuilder]: For program point queueEXIT(lines 1807 1816) no Hoare annotation was computed. [2022-11-19 07:18:22,981 INFO L899 garLoopResultBuilder]: For program point setClientIdEXIT(lines 1550 1569) no Hoare annotation was computed. [2022-11-19 07:18:22,981 INFO L902 garLoopResultBuilder]: At program point setClientIdENTRY(lines 1550 1569) the Hoare annotation is: true [2022-11-19 07:18:22,984 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1] [2022-11-19 07:18:22,987 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-19 07:18:23,047 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 07:18:23 BoogieIcfgContainer [2022-11-19 07:18:23,047 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-19 07:18:23,048 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-19 07:18:23,054 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-19 07:18:23,054 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-19 07:18:23,055 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:13:08" (3/4) ... [2022-11-19 07:18:23,058 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-19 07:18:23,063 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure outgoing [2022-11-19 07:18:23,063 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setEmailTo [2022-11-19 07:18:23,063 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getEmailTo [2022-11-19 07:18:23,064 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setClientAddressBookSize [2022-11-19 07:18:23,064 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure sendEmail [2022-11-19 07:18:23,064 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getClientAddressBookSize [2022-11-19 07:18:23,064 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getClientAddressBookAddress [2022-11-19 07:18:23,064 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure outgoing__wrappee__AutoResponder [2022-11-19 07:18:23,064 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setEmailFrom [2022-11-19 07:18:23,065 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getEmailFrom [2022-11-19 07:18:23,065 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setClientAddressBookAddress [2022-11-19 07:18:23,065 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isReadable [2022-11-19 07:18:23,065 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure queue [2022-11-19 07:18:23,065 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setClientId [2022-11-19 07:18:23,091 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 164 nodes and edges [2022-11-19 07:18:23,092 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2022-11-19 07:18:23,094 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2022-11-19 07:18:23,099 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2022-11-19 07:18:23,101 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-19 07:18:23,102 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-19 07:18:23,132 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && rjh == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && __ste_Client_AddressBook2_Alias0 == 0) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && 0 <= 2147483648 + retValue_acc) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && retValue_acc <= 2147483647) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && __ste_client_idCounter0 <= 1) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && retValue_acc == 1) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && 1 <= __ste_client_idCounter0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && tmp == 1) && __ste_email_signKey1 == 0 [2022-11-19 07:18:23,133 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __cil_tmp1 == 30) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 0 == __ste_email_subject0) && __ste_client_idCounter1 <= 2) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && 0 <= 2147483648 + retValue_acc) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && __ste_Client_AddressBook1_Alias2 == 0) && 2 <= __ste_client_idCounter1) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && retValue_acc <= 2147483647) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && retValue_acc == 1) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && tmp == 1) && __ste_email_signKey1 == 0 [2022-11-19 07:18:23,133 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __cil_tmp2 == 0) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __cil_tmp1 == 30) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && \old(chuck___0) <= 3) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && 0 <= 2147483648 + retValue_acc) && __ste_client_idCounter2 <= 3) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && 3 <= __ste_client_idCounter2) && __cil_tmp2 == 31) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && 3 == chuck) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && 3 <= chuck___0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && 3 <= \old(chuck___0)) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && retValue_acc <= 2147483647) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && chuck___0 <= 3) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && retValue_acc == 1) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && tmp == 1) && __ste_email_signKey1 == 0 [2022-11-19 07:18:23,143 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(queued_message) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(\old(__ste_email_to0) == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(bob == \old(sender))) || !(\old(__ste_email_to1) == 0)) || !(__ste_client_privateKey0 == 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(\old(receiver) == rjh)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(\old(__ste_email_from1) == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || ((((((((((((((((queued_message <= 0 && 0 <= __ste_email_from0) && \old(receiver) == receiver) && from == __ste_email_from0) && 0 <= queued_message) && from == \old(from)) && 1 <= sender) && sender <= 1) && \old(queue_empty) == queue_empty) && __ste_email_from0 <= 0) && __ste_email_to0 == to) && queued_client == \old(queued_client)) && \old(to) <= 2) && 2 <= \old(to)) && 2 <= to) && __ste_email_to0 <= 2) && 1 == msg)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(0 <= __ste_client_autoResponse1)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) [2022-11-19 07:18:23,144 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || ((((((queued_message == \old(queued_message) && __ste_email_to0 == \old(__ste_email_to0)) && __ste_email_to1 == \old(__ste_email_to1)) && \old(__ste_email_from0) == __ste_email_from0) && \old(__ste_email_from1) == __ste_email_from1) && \old(queue_empty) == queue_empty) && queued_client == \old(queued_client))) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(0 <= __ste_client_autoResponse1)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) [2022-11-19 07:18:23,145 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || (((((((((((((((((((((((((((((((((((handle <= 1 && tmp <= 2147483647) && retValue_acc <= 2147483647) && client <= 1) && queued_message <= 0) && __ste_email_from0 <= 2147483647) && 0 <= __ste_email_from0 + 2147483648) && 1 <= client) && \result <= 2147483647) && queue_empty <= 1) && \old(client) <= 1) && 1 <= msg) && \old(handle) <= 1) && 1 <= \old(handle)) && __ste_client_idCounter0 <= 2147483647) && client <= 1) && 1 <= \old(client)) && 1 <= queue_empty) && 1 <= msg) && 0 <= queued_message) && aux-getEmailTo(msg)-aux <= 2) && 1 <= \old(msg)) && 0 <= tmp + 2147483648) && 0 <= \result + 2147483648) && 0 <= queued_client) && 0 <= retValue_acc + 2147483648) && msg <= 1) && \old(msg) <= 1) && 2 <= aux-getEmailTo(msg)-aux) && msg <= 1) && 1 <= handle) && 0 <= __ste_client_idCounter0 + 2147483648) && 2 <= __ste_email_to0) && __ste_email_to0 <= 2) && 1 <= client) && queued_client <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(0 <= __ste_client_autoResponse1)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) [2022-11-19 07:18:23,146 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(1 <= \old(client)) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(\old(queued_message) == 0)) || !(\old(__ste_email_from0) == 0)) || !(rjh == \old(__ste_email_to0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(\old(client) <= 1)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || ((((((((((((((0 <= tmp && queued_message <= 0) && size == tmp) && __ste_email_to1 == \old(__ste_email_to1)) && \old(__ste_email_from0) == __ste_email_from0) && 0 <= queued_message) && \old(__ste_email_from1) == __ste_email_from1) && 1 <= msg) && \old(queue_empty) == queue_empty) && queued_client == \old(queued_client)) && client == \old(client)) && msg <= 1) && tmp <= 0) && 2 <= __ste_email_to0) && __ste_email_to0 <= 2)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(0 <= __ste_client_autoResponse1)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) [2022-11-19 07:18:23,230 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/witness.graphml [2022-11-19 07:18:23,230 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-19 07:18:23,231 INFO L158 Benchmark]: Toolchain (without parser) took 317372.74ms. Allocated memory was 83.9MB in the beginning and 664.8MB in the end (delta: 580.9MB). Free memory was 44.5MB in the beginning and 605.4MB in the end (delta: -560.9MB). Peak memory consumption was 404.3MB. Max. memory is 16.1GB. [2022-11-19 07:18:23,231 INFO L158 Benchmark]: CDTParser took 0.29ms. Allocated memory is still 83.9MB. Free memory is still 62.9MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-19 07:18:23,232 INFO L158 Benchmark]: CACSL2BoogieTranslator took 839.42ms. Allocated memory was 83.9MB in the beginning and 113.2MB in the end (delta: 29.4MB). Free memory was 44.3MB in the beginning and 68.5MB in the end (delta: -24.2MB). Peak memory consumption was 17.7MB. Max. memory is 16.1GB. [2022-11-19 07:18:23,232 INFO L158 Benchmark]: Boogie Procedure Inliner took 74.84ms. Allocated memory is still 113.2MB. Free memory was 68.5MB in the beginning and 63.7MB in the end (delta: 4.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-19 07:18:23,233 INFO L158 Benchmark]: Boogie Preprocessor took 45.41ms. Allocated memory is still 113.2MB. Free memory was 63.7MB in the beginning and 60.2MB in the end (delta: 3.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-19 07:18:23,233 INFO L158 Benchmark]: RCFGBuilder took 1562.26ms. Allocated memory is still 113.2MB. Free memory was 60.2MB in the beginning and 43.4MB in the end (delta: 16.7MB). Peak memory consumption was 40.5MB. Max. memory is 16.1GB. [2022-11-19 07:18:23,234 INFO L158 Benchmark]: TraceAbstraction took 314655.34ms. Allocated memory was 113.2MB in the beginning and 664.8MB in the end (delta: 551.6MB). Free memory was 42.7MB in the beginning and 224.1MB in the end (delta: -181.4MB). Peak memory consumption was 373.1MB. Max. memory is 16.1GB. [2022-11-19 07:18:23,234 INFO L158 Benchmark]: Witness Printer took 182.77ms. Allocated memory is still 664.8MB. Free memory was 224.1MB in the beginning and 605.4MB in the end (delta: -381.3MB). Peak memory consumption was 2.5MB. Max. memory is 16.1GB. [2022-11-19 07:18:23,236 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29ms. Allocated memory is still 83.9MB. Free memory is still 62.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 839.42ms. Allocated memory was 83.9MB in the beginning and 113.2MB in the end (delta: 29.4MB). Free memory was 44.3MB in the beginning and 68.5MB in the end (delta: -24.2MB). Peak memory consumption was 17.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 74.84ms. Allocated memory is still 113.2MB. Free memory was 68.5MB in the beginning and 63.7MB in the end (delta: 4.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 45.41ms. Allocated memory is still 113.2MB. Free memory was 63.7MB in the beginning and 60.2MB in the end (delta: 3.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * RCFGBuilder took 1562.26ms. Allocated memory is still 113.2MB. Free memory was 60.2MB in the beginning and 43.4MB in the end (delta: 16.7MB). Peak memory consumption was 40.5MB. Max. memory is 16.1GB. * TraceAbstraction took 314655.34ms. Allocated memory was 113.2MB in the beginning and 664.8MB in the end (delta: 551.6MB). Free memory was 42.7MB in the beginning and 224.1MB in the end (delta: -181.4MB). Peak memory consumption was 373.1MB. Max. memory is 16.1GB. * Witness Printer took 182.77ms. Allocated memory is still 664.8MB. Free memory was 224.1MB in the beginning and 605.4MB in the end (delta: -381.3MB). Peak memory consumption was 2.5MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 486]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 15 procedures, 122 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 314.5s, OverallIterations: 6, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 44.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 79.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 447 SdHoareTripleChecker+Valid, 15.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 429 mSDsluCounter, 5718 SdHoareTripleChecker+Invalid, 14.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4866 mSDsCounter, 34 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4203 IncrementalHoareTripleChecker+Invalid, 4237 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 34 mSolverCounterUnsat, 852 mSDtfsCounter, 4203 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 393 GetRequests, 314 SyntacticMatches, 3 SemanticMatches, 76 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 773 ImplicationChecksByTransitivity, 179.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=296occurred in iteration=5, InterpolantAutomatonStates: 72, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 6 MinimizatonAttempts, 113 StatesRemovedByMinimization, 3 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 79 LocationsWithAnnotation, 730 PreInvPairs, 888 NumberOfFragments, 15053 HoareAnnotationTreeSize, 730 FomulaSimplifications, 99372 FormulaSimplificationTreeSizeReduction, 3.0s HoareSimplificationTime, 79 FomulaSimplificationsInter, 13713 FormulaSimplificationTreeSizeReductionInter, 76.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 481 NumberOfCodeBlocks, 481 NumberOfCodeBlocksAsserted, 8 NumberOfCheckSat, 593 ConstructedInterpolants, 0 QuantifiedInterpolants, 697 SizeOfPredicates, 0 NumberOfNonLiveVariables, 1733 ConjunctsInSsa, 6 ConjunctsInUnsatCore, 10 InterpolantComputations, 4 PerfectInterpolantSequences, 109/121 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 35.2s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 11, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 63, DAG_INTERPRETER_EARLY_EXITS: 2, TOOLS_POST_APPLICATIONS: 70, TOOLS_POST_TIME: 16.9s, TOOLS_POST_CALL_APPLICATIONS: 36, TOOLS_POST_CALL_TIME: 9.3s, TOOLS_POST_RETURN_APPLICATIONS: 22, TOOLS_POST_RETURN_TIME: 2.0s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 128, TOOLS_QUANTIFIERELIM_TIME: 28.0s, TOOLS_QUANTIFIERELIM_MAX_TIME: 6.4s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 199, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 29, DOMAIN_JOIN_TIME: 5.9s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 3, DOMAIN_WIDEN_TIME: 0.7s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 5, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 63, DOMAIN_ISBOTTOM_TIME: 0.3s, LOOP_SUMMARIZER_APPLICATIONS: 2, LOOP_SUMMARIZER_CACHE_MISSES: 2, LOOP_SUMMARIZER_OVERALL_TIME: 8.5s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 8.5s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 5, CALL_SUMMARIZER_APPLICATIONS: 22, CALL_SUMMARIZER_CACHE_MISSES: 6, CALL_SUMMARIZER_OVERALL_TIME: 0.0s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.0s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 835, DAG_COMPRESSION_RETAINED_NODES: 218, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 2529]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __cil_tmp1 == 30) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 0 == __ste_email_subject0) && __ste_client_idCounter1 <= 2) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && 0 <= 2147483648 + retValue_acc) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && __ste_Client_AddressBook1_Alias2 == 0) && 2 <= __ste_client_idCounter1) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && retValue_acc <= 2147483647) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && retValue_acc == 1) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && tmp == 1) && __ste_email_signKey1 == 0 - InvariantResult [Line: 2616]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2384]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1601]: Loop Invariant Derived loop invariant: !(tmp == 0) - InvariantResult [Line: 2350]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2289]: Loop Invariant Derived loop invariant: !(tmp == 0) - InvariantResult [Line: 2642]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1697]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(1 <= \old(client)) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(\old(queued_message) == 0)) || !(\old(__ste_email_from0) == 0)) || !(rjh == \old(__ste_email_to0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(\old(client) <= 1)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || ((((((((((((((0 <= tmp && queued_message <= 0) && size == tmp) && __ste_email_to1 == \old(__ste_email_to1)) && \old(__ste_email_from0) == __ste_email_from0) && 0 <= queued_message) && \old(__ste_email_from1) == __ste_email_from1) && 1 <= msg) && \old(queue_empty) == queue_empty) && queued_client == \old(queued_client)) && client == \old(client)) && msg <= 1) && tmp <= 0) && 2 <= __ste_email_to0) && __ste_email_to0 <= 2)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(0 <= __ste_client_autoResponse1)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) - InvariantResult [Line: 2442]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1665]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || (((((((((((((((((((((((((((((((((((handle <= 1 && tmp <= 2147483647) && retValue_acc <= 2147483647) && client <= 1) && queued_message <= 0) && __ste_email_from0 <= 2147483647) && 0 <= __ste_email_from0 + 2147483648) && 1 <= client) && \result <= 2147483647) && queue_empty <= 1) && \old(client) <= 1) && 1 <= msg) && \old(handle) <= 1) && 1 <= \old(handle)) && __ste_client_idCounter0 <= 2147483647) && client <= 1) && 1 <= \old(client)) && 1 <= queue_empty) && 1 <= msg) && 0 <= queued_message) && aux-getEmailTo(msg)-aux <= 2) && 1 <= \old(msg)) && 0 <= tmp + 2147483648) && 0 <= \result + 2147483648) && 0 <= queued_client) && 0 <= retValue_acc + 2147483648) && msg <= 1) && \old(msg) <= 1) && 2 <= aux-getEmailTo(msg)-aux) && msg <= 1) && 1 <= handle) && 0 <= __ste_client_idCounter0 + 2147483648) && 2 <= __ste_email_to0) && __ste_email_to0 <= 2) && 1 <= client) && queued_client <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(0 <= __ste_client_autoResponse1)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) - InvariantResult [Line: 2539]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __cil_tmp2 == 0) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __cil_tmp1 == 30) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && \old(chuck___0) <= 3) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && 0 <= 2147483648 + retValue_acc) && __ste_client_idCounter2 <= 3) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && 3 <= __ste_client_idCounter2) && __cil_tmp2 == 31) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && 3 == chuck) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && 3 <= chuck___0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && 3 <= \old(chuck___0)) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && retValue_acc <= 2147483647) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && chuck___0 <= 3) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && retValue_acc == 1) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && tmp == 1) && __ste_email_signKey1 == 0 - InvariantResult [Line: 2395]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2519]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && rjh == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && __ste_Client_AddressBook2_Alias0 == 0) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && 0 <= 2147483648 + retValue_acc) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && retValue_acc <= 2147483647) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && __ste_client_idCounter0 <= 1) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && retValue_acc == 1) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && 1 <= __ste_client_idCounter0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && tmp == 1) && __ste_email_signKey1 == 0 - InvariantResult [Line: 1740]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2637]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2456]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 486]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2421]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2374]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2406]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2431]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1867]: Loop Invariant Derived loop invariant: !(tmp == 0) - InvariantResult [Line: 2557]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2549]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2359]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2560]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2370]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1844]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2417]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1758]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2351]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1671]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || ((((((queued_message == \old(queued_message) && __ste_email_to0 == \old(__ste_email_to0)) && __ste_email_to1 == \old(__ste_email_to1)) && \old(__ste_email_from0) == __ste_email_from0) && \old(__ste_email_from1) == __ste_email_from1) && \old(queue_empty) == queue_empty) && queued_client == \old(queued_client))) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(0 <= __ste_client_autoResponse1)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) - InvariantResult [Line: 1634]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(queued_message) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(\old(__ste_email_to0) == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(bob == \old(sender))) || !(\old(__ste_email_to1) == 0)) || !(__ste_client_privateKey0 == 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(\old(receiver) == rjh)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(\old(__ste_email_from1) == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || ((((((((((((((((queued_message <= 0 && 0 <= __ste_email_from0) && \old(receiver) == receiver) && from == __ste_email_from0) && 0 <= queued_message) && from == \old(from)) && 1 <= sender) && sender <= 1) && \old(queue_empty) == queue_empty) && __ste_email_from0 <= 0) && __ste_email_to0 == to) && queued_client == \old(queued_client)) && \old(to) <= 2) && 2 <= \old(to)) && 2 <= to) && __ste_email_to0 <= 2) && 1 == msg)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(0 <= __ste_client_autoResponse1)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) - InvariantResult [Line: 2467]: Loop Invariant Derived loop invariant: tmp == 1 RESULT: Ultimate proved your program to be correct! [2022-11-19 07:18:23,299 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c3d9d0c-ebf6-4fa1-a93e-1c1be5d2039e/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE